General
- Target 2026-06-26_d350fd9050d15c8a0c32bfc8ab970233_amadey_cobalt-strike_emotet_fabookie_glassworm_luca-stealer_njrat_satacom_stop
- Size 27.4MB
- Sample260629-n7288acv71
- SHA256 6f45beb9cacd3a64d0643095b5df89510ef75fec4e2d789cfb87e47489a16ff9
- MD5 d350fd9050d15c8a0c32bfc8ab970233
- SHA1 264a23b3c8cf49ceeedda25f6021feedec3f4d48
- SHA512 c9b57de439d65354fdf4062f93a26d63db07bf04ccc9ce34de5e624cfc2a61b81c171247ff78dd89cde54dc8e5feacf105396e1703f0e38d74eee5883221d4ad
- SSDEEP 196608:0yHNOyO4yHNOyO4yHNOyO4yHNOyO4yHNOyO4yHNOyO4yHNOyO:FOFOFOFOFOFOFO
- TLSH T16F577D02B3A9A8F5C57580714AB38BB7D736BC54172596CF6390FF6A2E312C2B939701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_d350fd9050d15c8a0c32bfc8ab970233_amadey_cobalt-strike_emotet_fabookie_glassworm_luca-stealer_njrat_satacom_stop.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_d350fd9050d15c8a0c32bfc8ab970233_amadey_cobalt-strike_emotet_fabookie_glassworm_luca-stealer_njrat_satacom_stop.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_d350fd9050d15c8a0c32bfc8ab970233_amadey_cobalt-strike_emotet_fabookie_glassworm_luca-stealer_njrat_satacom_stop
- Size 27.4MB
- SHA256 6f45beb9cacd3a64d0643095b5df89510ef75fec4e2d789cfb87e47489a16ff9
- MD5 d350fd9050d15c8a0c32bfc8ab970233
- SHA1 264a23b3c8cf49ceeedda25f6021feedec3f4d48
- SHA512 c9b57de439d65354fdf4062f93a26d63db07bf04ccc9ce34de5e624cfc2a61b81c171247ff78dd89cde54dc8e5feacf105396e1703f0e38d74eee5883221d4ad
- SSDEEP 196608:0yHNOyO4yHNOyO4yHNOyO4yHNOyO4yHNOyO4yHNOyO4yHNOyO:FOFOFOFOFOFOFO
- TLSH T16F577D02B3A9A8F5C57580714AB38BB7D736BC54172596CF6390FF6A2E312C2B939701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.