General
- Target 2026-07-01_a2eea9ba1a553c91e27979dc1b6ee3a0_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_maze_njrat_remcos_satacom
- Size 2.1MB
- Sample260701-vaxqsscs2z
- SHA256 e920bf64501bc9f1cbfa2a8a5d012fb1f0a082a3b2f797928cb58f86d2d340dc
- MD5 a2eea9ba1a553c91e27979dc1b6ee3a0
- SHA1 d6ec0bfb06b137a01195ab62652f4fc8baaddf80
- SHA512 c9ea4f68a2b4e99779937e62699fed42bf0170cde66ebd7a50595e99789f137e1caba99b8a0e150521e8fb8b6c5d98abf5362b9c6a37c2a95409446c7cf1d029
- SSDEEP 24576:k9oAYF3tm7s7GxzfadB3IxSyzszrYm4R+9Mt:LSSaydB3IHKzq+9G
- TLSH T198A5D313AE5C8471D0AF7D304D60D7D996257C108A23AE8A6ED47ECEEBF25C07A2D631
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_a2eea9ba1a553c91e27979dc1b6ee3a0_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_ic.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_a2eea9ba1a553c91e27979dc1b6ee3a0_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_ic.exe
Resource
win11ltsc2024-20260629-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_a2eea9ba1a553c91e27979dc1b6ee3a0_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_icedid_maze_njrat_remcos_satacom
- Size 2.1MB
- SHA256 e920bf64501bc9f1cbfa2a8a5d012fb1f0a082a3b2f797928cb58f86d2d340dc
- MD5 a2eea9ba1a553c91e27979dc1b6ee3a0
- SHA1 d6ec0bfb06b137a01195ab62652f4fc8baaddf80
- SHA512 c9ea4f68a2b4e99779937e62699fed42bf0170cde66ebd7a50595e99789f137e1caba99b8a0e150521e8fb8b6c5d98abf5362b9c6a37c2a95409446c7cf1d029
- SSDEEP 24576:k9oAYF3tm7s7GxzfadB3IxSyzszrYm4R+9Mt:LSSaydB3IHKzq+9G
- TLSH T198A5D313AE5C8471D0AF7D304D60D7D996257C108A23AE8A6ED47ECEEBF25C07A2D631
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.