General
- Target 2026-04-24_4b69ce61a850447d23e5e42b9d126b3c_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stealc_vidar
- Size 8.8MB
- Sample260425-a76dzsat3s
- SHA256 a433e59cd856fde12d7dae78080e055c96f4af14266d4a3539cbdd8cd89416aa
- MD5 4b69ce61a850447d23e5e42b9d126b3c
- SHA1 af13050d8de2dd65178230c8728fd12cf92a6f62
- SHA512 f9a33eb599cf096bd342547ed5b312896b6d815129a5971c82f0157d0312b85356dc7d6fab5312897b347d5575c84a3058fa53b9c277c02c123fc390f84a8626
- SSDEEP 98304:AKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPKOKRuy5a/OU/jIEeQfoR/IuOFVjUus:AquFIF0wuPlCKOquFIF0wuPlCKM
- TLSH T13196AE12B6D18072E1B315304979922D5A79B86187338D8F738C1E9EAFB19C19F36B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-24_4b69ce61a850447d23e5e42b9d126b3c_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_4b69ce61a850447d23e5e42b9d126b3c_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_4b69ce61a850447d23e5e42b9d126b3c_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_satacom_smoke-loader_stealc_vidar
- Size 8.8MB
- SHA256 a433e59cd856fde12d7dae78080e055c96f4af14266d4a3539cbdd8cd89416aa
- MD5 4b69ce61a850447d23e5e42b9d126b3c
- SHA1 af13050d8de2dd65178230c8728fd12cf92a6f62
- SHA512 f9a33eb599cf096bd342547ed5b312896b6d815129a5971c82f0157d0312b85356dc7d6fab5312897b347d5575c84a3058fa53b9c277c02c123fc390f84a8626
- SSDEEP 98304:AKRuy5a/OU/jIEeQfoR/IuOFVjUu55K2cPKOKRuy5a/OU/jIEeQfoR/IuOFVjUus:AquFIF0wuPlCKOquFIF0wuPlCKM
- TLSH T13196AE12B6D18072E1B315304979922D5A79B86187338D8F738C1E9EAFB19C19F36B37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.