General
- Target 2026-04-21_2520e3bf144caff3e5bce0cd4f6bbf9b_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_kwampirs_vidar_wannacry
- Size 2.2MB
- Sample260421-e2re4ahw3m
- SHA256 3803aca429f0955f6ec15e342c248b8d2290b25d045b366b610be24756bdcb33
- MD5 2520e3bf144caff3e5bce0cd4f6bbf9b
- SHA1 64dc83b7d544f115a197e120cb6a43d4c28e8d3e
- SHA512 1cc9042cdbbfeb7d7eb4b23a5948f71485b2f30b98e1310ef43487e917ff0f32dedfa1329a97c74a932200c97918837541a3003fd51c35b5195575a8125cba99
- SSDEEP 24576:1I1lwH8OhQfK56rsJ5/6vNtdTaZ+s57xjRaSDMiA2PqCW+9M:fcOCfY6rsP/IaZx57xjRaUMiA2Pq+W
- TLSH T14BB59D2EFE909DB9E5620031CAB4E75D1229BD310B2191C7B298761DEE31FC26E35B17
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-21_2520e3bf144caff3e5bce0cd4f6bbf9b_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_2520e3bf144caff3e5bce0cd4f6bbf9b_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_kwampirs_vidar_wannacry
- Size 2.2MB
- SHA256 3803aca429f0955f6ec15e342c248b8d2290b25d045b366b610be24756bdcb33
- MD5 2520e3bf144caff3e5bce0cd4f6bbf9b
- SHA1 64dc83b7d544f115a197e120cb6a43d4c28e8d3e
- SHA512 1cc9042cdbbfeb7d7eb4b23a5948f71485b2f30b98e1310ef43487e917ff0f32dedfa1329a97c74a932200c97918837541a3003fd51c35b5195575a8125cba99
- SSDEEP 24576:1I1lwH8OhQfK56rsJ5/6vNtdTaZ+s57xjRaSDMiA2PqCW+9M:fcOCfY6rsP/IaZx57xjRaUMiA2Pq+W
- TLSH T14BB59D2EFE909DB9E5620031CAB4E75D1229BD310B2191C7B298761DEE31FC26E35B17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in System32 directory