General
- Target 2026-04-23_4070245b427aec8d84d1b4312b2c0258_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_mafia_metamorfo_njrat
- Size 655KB
- Sample260423-vvarrscv3x
- SHA256 ab9c15dc735cb259a5bbd8d35d39a2f98cb393542d9dbb46a873630bcd494b0d
- MD5 4070245b427aec8d84d1b4312b2c0258
- SHA1 4e5830e340eae39e51d023556b05dd72f42e61a1
- SHA512 9e30818a001756fb6eda3b30264d4d22c44762166a687e143558e18d5824334eb3fd2550ead15e8aa6296818d42b543fd73deb6e6219c1d9fe20e1620cc8d183
- SSDEEP 12288:Jc3c76uz3sBO+XThuL5dtMdNVBT0fmyZuiN/HbZ57sqQgc7Nv3:Jc3EEg+QLb8NVcv/Hb/xc7Z
- TLSH T126E4491177909F31E2BF09319A6996754A7FBC209F2187CF63943E29BE306C19934B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-23_4070245b427aec8d84d1b4312b2c0258_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-23_4070245b427aec8d84d1b4312b2c0258_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-23_4070245b427aec8d84d1b4312b2c0258_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-stealer_mafia_metamorfo_njrat
- Size 655KB
- SHA256 ab9c15dc735cb259a5bbd8d35d39a2f98cb393542d9dbb46a873630bcd494b0d
- MD5 4070245b427aec8d84d1b4312b2c0258
- SHA1 4e5830e340eae39e51d023556b05dd72f42e61a1
- SHA512 9e30818a001756fb6eda3b30264d4d22c44762166a687e143558e18d5824334eb3fd2550ead15e8aa6296818d42b543fd73deb6e6219c1d9fe20e1620cc8d183
- SSDEEP 12288:Jc3c76uz3sBO+XThuL5dtMdNVBT0fmyZuiN/HbZ57sqQgc7Nv3:Jc3EEg+QLb8NVcv/Hb/xc7Z
- TLSH T126E4491177909F31E2BF09319A6996754A7FBC209F2187CF63943E29BE306C19934B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.