General
- Target 2026-04-27_0e8e2cdbca4bcfe13bde13a16e132fbc_amadey_cobalt-strike_darkgate_fabookie_glassworm_icedid_rhadamanthys_satacom_smoke-loader_stealc_vidar_wannacry
- Size 4.0MB
- Sample260427-we9rlafs2x
- SHA256 f3848c36f3a3daffe8dc9813179967f1a3744ad5de51290661ef83f4563312d0
- MD5 0e8e2cdbca4bcfe13bde13a16e132fbc
- SHA1 e64704a85ea3be8e0a2eb7655efcffede83ca16f
- SHA512 d34d20ef6c27e188caa9b4b2c201a03ca88da4da6ed0edc72454ee874f42d6c22c2de9079b99c705c4d1919c55ee2dc0a60bae5ecd5c27c03d2725ae012a68f4
- SSDEEP 49152:BllR0llR1wMCxpQnqatglF/ev66hOhllR0llR1wMCxpQnqatglF/ev66hOhAojT:BllR0llRrGAAllR0llRrGAoT
- TLSH T18F166C16B79440F6D46241348556861AEB7278219B239FCF2390DAFEBF737C0AE35B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-27_0e8e2cdbca4bcfe13bde13a16e132fbc_amadey_cobalt-strike_darkgate_fabookie_glassworm_icedid_.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-27_0e8e2cdbca4bcfe13bde13a16e132fbc_amadey_cobalt-strike_darkgate_fabookie_glassworm_icedid_.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-27_0e8e2cdbca4bcfe13bde13a16e132fbc_amadey_cobalt-strike_darkgate_fabookie_glassworm_icedid_rhadamanthys_satacom_smoke-loader_stealc_vidar_wannacry
- Size 4.0MB
- SHA256 f3848c36f3a3daffe8dc9813179967f1a3744ad5de51290661ef83f4563312d0
- MD5 0e8e2cdbca4bcfe13bde13a16e132fbc
- SHA1 e64704a85ea3be8e0a2eb7655efcffede83ca16f
- SHA512 d34d20ef6c27e188caa9b4b2c201a03ca88da4da6ed0edc72454ee874f42d6c22c2de9079b99c705c4d1919c55ee2dc0a60bae5ecd5c27c03d2725ae012a68f4
- SSDEEP 49152:BllR0llR1wMCxpQnqatglF/ev66hOhllR0llR1wMCxpQnqatglF/ev66hOhAojT:BllR0llRrGAAllR0llRrGAoT
- TLSH T18F166C16B79440F6D46241348556861AEB7278219B239FCF2390DAFEBF737C0AE35B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.