General
- Target 2026-07-05_cace0d3f413751ac2ff961775d0a9ef6_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 1.8MB
- Sample260705-d1lmsagz8s
- SHA256 0fe3b1e373420d0ce44cfdab5b49f6a99c1455614428297569b7140eb82d58a3
- MD5 cace0d3f413751ac2ff961775d0a9ef6
- SHA1 5121716b03f810626c301f693012acb4e2db3210
- SHA512 c2a43293ad316b138f56ec868d8fdffe071ce57486b7469c82115eabcda3e90e279526f264ae66edd0c010287ce5dcce0cbc8e54bbda666138be7b3b820760a6
- SSDEEP 24576:A3mnXoZjzyaT4aewsAjl5Sapv6/o3mnXoZjzyaT4aewsAjl5Sapv6/9:A3kMPljd3kMPljY
- TLSH T1A395B023FB7090B5D23B49705BA5C712EB797C210B6056CBE3A88A591F317C06F3AB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-05_cace0d3f413751ac2ff961775d0a9ef6_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_cace0d3f413751ac2ff961775d0a9ef6_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_cace0d3f413751ac2ff961775d0a9ef6_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 1.8MB
- SHA256 0fe3b1e373420d0ce44cfdab5b49f6a99c1455614428297569b7140eb82d58a3
- MD5 cace0d3f413751ac2ff961775d0a9ef6
- SHA1 5121716b03f810626c301f693012acb4e2db3210
- SHA512 c2a43293ad316b138f56ec868d8fdffe071ce57486b7469c82115eabcda3e90e279526f264ae66edd0c010287ce5dcce0cbc8e54bbda666138be7b3b820760a6
- SSDEEP 24576:A3mnXoZjzyaT4aewsAjl5Sapv6/o3mnXoZjzyaT4aewsAjl5Sapv6/9:A3kMPljd3kMPljY
- TLSH T1A395B023FB7090B5D23B49705BA5C712EB797C210B6056CBE3A88A591F317C06F3AB65
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory