General
- Target 2026-04-17_19b6f7575afcf7904d809cd8b9e4893f_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_njrat_smoke-loader_vidar
- Size 1.2MB
- Sample260417-q2rlmsaw4x
- SHA256 6f4508485f58cb12c549291e59e82f135280669ef108e9b0cf846ed4673cfab2
- MD5 19b6f7575afcf7904d809cd8b9e4893f
- SHA1 aa53000eaa46df9f9c9579ee84adb6253fcf6f75
- SHA512 86932825128751d57b7486e5fddb26c9464997005d159b70a8395083a36074092c86424fec908a240aca8adb90d345c032985cadd9de776adaad4226b1c2214a
- SSDEEP 24576:KK2eTEe+YBMFNNXAia7/ezSC6vUyD/aqgrvWxC2:P2od+YBMF/XS/ezSC6vUzPvMC2
- TLSH T148554C6AF5B88272D072D07AC6D2EB1AE5723482533085CF434787692F177E6D53AB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2026-04-17_19b6f7575afcf7904d809cd8b9e4893f_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_19b6f7575afcf7904d809cd8b9e4893f_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_19b6f7575afcf7904d809cd8b9e4893f_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_njrat_smoke-loader_vidar
- Size 1.2MB
- SHA256 6f4508485f58cb12c549291e59e82f135280669ef108e9b0cf846ed4673cfab2
- MD5 19b6f7575afcf7904d809cd8b9e4893f
- SHA1 aa53000eaa46df9f9c9579ee84adb6253fcf6f75
- SHA512 86932825128751d57b7486e5fddb26c9464997005d159b70a8395083a36074092c86424fec908a240aca8adb90d345c032985cadd9de776adaad4226b1c2214a
- SSDEEP 24576:KK2eTEe+YBMFNNXAia7/ezSC6vUyD/aqgrvWxC2:P2od+YBMF/XS/ezSC6vUzPvMC2
- TLSH T148554C6AF5B88272D072D07AC6D2EB1AE5723482533085CF434787692F177E6D53AB32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Adds Run key to start application
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.