General
- Target 2026-04-15_bc06e368936ed818067fbc5fe1835183_amadey_cobalt-strike_darkgate_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_stealc_stop_vidar
- Size 31.8MB
- Sample260415-3ec6yses6v
- SHA256 03c3c72c873437b5564b855270a823c8a5ac941077930be92d6a592091246ae6
- MD5 bc06e368936ed818067fbc5fe1835183
- SHA1 51a1a2c7cd6666c9a6991a08e955a59433d61fbb
- SHA512 d6d7055511276c8d87a5d77ec3021417bcfa351b4f1e48dbff539b2eab0b4424ade6efad6b3ea60286de3053f8e00326d5883c2964cba6f64e09806b247da936
- SSDEEP 786432:2re5+re5kC6vQHrKtre5+re5kC6vQHrKabr0:evQHWHvQHWabr0
- TLSH T176778E26B29610F9D06AD138C6678732EA767C110730A7DF03A4B6652F737E45F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_bc06e368936ed818067fbc5fe1835183_amadey_cobalt-strike_darkgate_glassworm_hijackloader_ice.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_bc06e368936ed818067fbc5fe1835183_amadey_cobalt-strike_darkgate_glassworm_hijackloader_ice.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_bc06e368936ed818067fbc5fe1835183_amadey_cobalt-strike_darkgate_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_stealc_stop_vidar
- Size 31.8MB
- SHA256 03c3c72c873437b5564b855270a823c8a5ac941077930be92d6a592091246ae6
- MD5 bc06e368936ed818067fbc5fe1835183
- SHA1 51a1a2c7cd6666c9a6991a08e955a59433d61fbb
- SHA512 d6d7055511276c8d87a5d77ec3021417bcfa351b4f1e48dbff539b2eab0b4424ade6efad6b3ea60286de3053f8e00326d5883c2964cba6f64e09806b247da936
- SSDEEP 786432:2re5+re5kC6vQHrKtre5+re5kC6vQHrKabr0:evQHWHvQHWabr0
- TLSH T176778E26B29610F9D06AD138C6678732EA767C110730A7DF03A4B6652F737E45F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.