General
- Target 2026-06-25_9b6b32f419d9d27e3e595d9fe6d43843_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_satacom_smoke-loader_wannacry
- Size 592KB
- Sample260629-znppkae17s
- SHA256 6659271167943dc60f806c291333837a2ff7fbb40558f2513b44f39dfa829a10
- MD5 9b6b32f419d9d27e3e595d9fe6d43843
- SHA1 181158fdd723e99ffc4d4cec926cedc02bd4f139
- SHA512 82ed08c8db113515a2270eca1f7999665f13396d3d44d30b7593c4018e349c5df6061848de7ff8a53fbd673961239992e776a9d105f873b0da8dbe1de37dae62
- SSDEEP 12288:iFoCAwSfxL/2Dc3jDLLmt0LDQewsAjR2aEpmEQt0/F:iFoHaewsAjYaEpmEQtcF
- TLSH T17FD49D32EE74D432E77B0D712AB58706587CBE114B914AC7E3AC8A4D1E303C16776B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_9b6b32f419d9d27e3e595d9fe6d43843_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_9b6b32f419d9d27e3e595d9fe6d43843_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_9b6b32f419d9d27e3e595d9fe6d43843_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_satacom_smoke-loader_wannacry
- Size 592KB
- SHA256 6659271167943dc60f806c291333837a2ff7fbb40558f2513b44f39dfa829a10
- MD5 9b6b32f419d9d27e3e595d9fe6d43843
- SHA1 181158fdd723e99ffc4d4cec926cedc02bd4f139
- SHA512 82ed08c8db113515a2270eca1f7999665f13396d3d44d30b7593c4018e349c5df6061848de7ff8a53fbd673961239992e776a9d105f873b0da8dbe1de37dae62
- SSDEEP 12288:iFoCAwSfxL/2Dc3jDLLmt0LDQewsAjR2aEpmEQt0/F:iFoHaewsAjYaEpmEQtcF
- TLSH T17FD49D32EE74D432E77B0D712AB58706587CBE114B914AC7E3AC8A4D1E303C16776B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.