General
- Target 2026-07-01_5e0e3871ecfd7d7136128ed44a981a70_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_stealc_vidar_wannacry
- Size 1.7MB
- Sample260701-x2k77ads2n
- SHA256 4254ba17a900b0ce6b2e36f31738ba0aa5319145130ac6bb8795835788f5b9f9
- MD5 5e0e3871ecfd7d7136128ed44a981a70
- SHA1 7baca981f3c3d13a868f2054dabb766fd83d4bc0
- SHA512 a3448dbea8bb4a098c79033fb7e7377fdb7498cc88003b0058a30c6105c98099f0fd7bd881cdc4d52a33b7710bb542eac673fa09160c269b9804d23a415d556d
- SSDEEP 24576:A3mnXoZjzyaEFoHaewsAjYaEg6TLavdczWj8PSeWygmNWZcb1pEKdUnHBt9Z:A3kM8ljouygmUSbHDUnT
- TLSH T180857C52ABF844F5F17786709A758632FAB5BC520B30968F5360C65E1F33AC09E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-01_5e0e3871ecfd7d7136128ed44a981a70_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_5e0e3871ecfd7d7136128ed44a981a70_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260629-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_5e0e3871ecfd7d7136128ed44a981a70_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_stealc_vidar_wannacry
- Size 1.7MB
- SHA256 4254ba17a900b0ce6b2e36f31738ba0aa5319145130ac6bb8795835788f5b9f9
- MD5 5e0e3871ecfd7d7136128ed44a981a70
- SHA1 7baca981f3c3d13a868f2054dabb766fd83d4bc0
- SHA512 a3448dbea8bb4a098c79033fb7e7377fdb7498cc88003b0058a30c6105c98099f0fd7bd881cdc4d52a33b7710bb542eac673fa09160c269b9804d23a415d556d
- SSDEEP 24576:A3mnXoZjzyaEFoHaewsAjYaEg6TLavdczWj8PSeWygmNWZcb1pEKdUnHBt9Z:A3kM8ljouygmUSbHDUnT
- TLSH T180857C52ABF844F5F17786709A758632FAB5BC520B30968F5360C65E1F33AC09E39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory