General
- Target 2026-06-26_8fbd39cc07486ff0bedf755df493d8d8_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_stealc_vidar
- Size 2.5MB
- Sample260629-rc5bwagy5r
- SHA256 e6efe303a45be4037d6a240bb660db705f55150bedffda9c8bfffdfcc4fdfa91
- MD5 8fbd39cc07486ff0bedf755df493d8d8
- SHA1 a2dc28199976656c522dd1d73dd50219cf3c2df9
- SHA512 094f57479ee9ed0ce24066c4a3fee65f5a43ee27c3d25689d7a2c143a410cb901c7d3da373d3cbb396320dbda67e74f3abf433bfc9e7aa3dab86d168588c3da9
- SSDEEP 49152:nj9LxcO4Q5Yfz413nOUWPsDsnRYEWyDxKoYfEDEml4TEWI86A6F:njBxcO4EYrSOxsonNWmxKoYfEo87Ae
- TLSH T1F7C5BF02B6D140F5E4632271605AA73ADA36BD1147308EDF9794FDA96FB32C09A3D363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-26_8fbd39cc07486ff0bedf755df493d8d8_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_8fbd39cc07486ff0bedf755df493d8d8_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_8fbd39cc07486ff0bedf755df493d8d8_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_stealc_vidar
- Size 2.5MB
- SHA256 e6efe303a45be4037d6a240bb660db705f55150bedffda9c8bfffdfcc4fdfa91
- MD5 8fbd39cc07486ff0bedf755df493d8d8
- SHA1 a2dc28199976656c522dd1d73dd50219cf3c2df9
- SHA512 094f57479ee9ed0ce24066c4a3fee65f5a43ee27c3d25689d7a2c143a410cb901c7d3da373d3cbb396320dbda67e74f3abf433bfc9e7aa3dab86d168588c3da9
- SSDEEP 49152:nj9LxcO4Q5Yfz413nOUWPsDsnRYEWyDxKoYfEDEml4TEWI86A6F:njBxcO4EYrSOxsonNWmxKoYfEo87Ae
- TLSH T1F7C5BF02B6D140F5E4632271605AA73ADA36BD1147308EDF9794FDA96FB32C09A3D363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Drops file in Drivers directory
Adds Run key to start application
Drops file in System32 directory