General
- Target 2026-06-27_b861c12d7fcc7e639da9c8c9be02e0a6_amadey_cobalt-strike_darkgate_glassworm_hijackloader_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar_xworm
- Size 1.8MB
- Sample260629-d4ecwadv4j
- SHA256 12c8b3838043ca6d1a63415eacfa6b1a1fbe7303b1fddbe6a0bff9036150c165
- MD5 b861c12d7fcc7e639da9c8c9be02e0a6
- SHA1 7ce7c04a4d78761d3f290a9d8c3b292d52a64b16
- SHA512 e96b317f39749dad0ef618a50ef6ddbe90898a869a9d67fd94ab0c5c764ec731dccef547bafa33a92a9fb6daabb87908b2ab6c567b765f40a2a09fef41c38463
- SSDEEP 24576:6bvgQWFxhhv9+avbHVD2SouDaFOnY548usEj1J4JMzHRX4+:l5Fx9+CVD2SouuFOnYIsE5JIMzHRX4+
- TLSH T1B8952911BBE95A29F1FB2731AE7852644A7B7C615F31C6CF13801A5E2D31AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-27_b861c12d7fcc7e639da9c8c9be02e0a6_amadey_cobalt-strike_darkgate_glassworm_hijackloader_ice.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_b861c12d7fcc7e639da9c8c9be02e0a6_amadey_cobalt-strike_darkgate_glassworm_hijackloader_ice.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_b861c12d7fcc7e639da9c8c9be02e0a6_amadey_cobalt-strike_darkgate_glassworm_hijackloader_icedid_luca-stealer_njrat_ryuk_satacom_stealc_vidar_xworm
- Size 1.8MB
- SHA256 12c8b3838043ca6d1a63415eacfa6b1a1fbe7303b1fddbe6a0bff9036150c165
- MD5 b861c12d7fcc7e639da9c8c9be02e0a6
- SHA1 7ce7c04a4d78761d3f290a9d8c3b292d52a64b16
- SHA512 e96b317f39749dad0ef618a50ef6ddbe90898a869a9d67fd94ab0c5c764ec731dccef547bafa33a92a9fb6daabb87908b2ab6c567b765f40a2a09fef41c38463
- SSDEEP 24576:6bvgQWFxhhv9+avbHVD2SouDaFOnY548usEj1J4JMzHRX4+:l5Fx9+CVD2SouuFOnYIsE5JIMzHRX4+
- TLSH T1B8952911BBE95A29F1FB2731AE7852644A7B7C615F31C6CF13801A5E2D31AC09936B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association