General
- Target 2026-06-02_e45d5527a7c7138c56349afc2a9cd898_amadey_cobalt-strike_conti_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 974KB
- Sample260602-qv4bvsfx2m
- SHA256 989f4c1ac30dc0b42a1d905a1028ddf45d297ea5fd46836610cf3ddaf56c7654
- MD5 e45d5527a7c7138c56349afc2a9cd898
- SHA1 404ca017e17a4b85f4793dbf526a175df7506303
- SHA512 c69fbc08344190072151e3cd33dee7440f589e2e6bde9575dade3f5a3725d9758bba56ff36d34d075f1ecb87b653fda26f62b253d160b220cf1a86d25b1a1662
- SSDEEP 12288:A3ZUnXoZ+yPz5L8aEFoCAwSfxL/2Dc3jDLLmt0LDQewsAjR+yPz5L8ua:A3mnXoZjzyaEFoHaewsAjJzyua
- TLSH T1C425AF23FBB090F5D27B45754A658712E7797C310B205ACBE3A48A691F327D06F3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-02_e45d5527a7c7138c56349afc2a9cd898_amadey_cobalt-strike_conti_darkgate_elex_glassworm_hawke.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_e45d5527a7c7138c56349afc2a9cd898_amadey_cobalt-strike_conti_darkgate_elex_glassworm_hawke.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_e45d5527a7c7138c56349afc2a9cd898_amadey_cobalt-strike_conti_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 974KB
- SHA256 989f4c1ac30dc0b42a1d905a1028ddf45d297ea5fd46836610cf3ddaf56c7654
- MD5 e45d5527a7c7138c56349afc2a9cd898
- SHA1 404ca017e17a4b85f4793dbf526a175df7506303
- SHA512 c69fbc08344190072151e3cd33dee7440f589e2e6bde9575dade3f5a3725d9758bba56ff36d34d075f1ecb87b653fda26f62b253d160b220cf1a86d25b1a1662
- SSDEEP 12288:A3ZUnXoZ+yPz5L8aEFoCAwSfxL/2Dc3jDLLmt0LDQewsAjR+yPz5L8ua:A3mnXoZjzyaEFoHaewsAjJzyua
- TLSH T1C425AF23FBB090F5D27B45754A658712E7797C310B205ACBE3A48A691F327D06F3AB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.