General
- Target 2026-07-06_a455122fa46f40a97061ae0775149d77_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar
- Size 1.5MB
- Sample260706-scea5agw91
- SHA256 a901bd26f786dbcc6a3775d60d3c82cd70e0948f397fdcd551b1988a1a475d9d
- MD5 a455122fa46f40a97061ae0775149d77
- SHA1 b7620560242d1390096745f4c0bc3a8961093473
- SHA512 2108c39e7d231b8c3a1127b65b97149014bd4cc41dcf35a3f2329ee0c4238643a3f05b697cadb9b6f523191a38f97788b0b96523160b37c6065a7e427fb8d28e
- SSDEEP 24576:A3mnXoZjzyaT4aewsAjxTc6r2XlFYTqMi8CtBd2QHCHmTBW5:A3kMPlj7qJtb2I
- TLSH T19E757D22F6B48275D077C475C6E2975AEE3538424B308ACB9389C76D2F237D19A3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-06_a455122fa46f40a97061ae0775149d77_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_a455122fa46f40a97061ae0775149d77_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260630-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_a455122fa46f40a97061ae0775149d77_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar
- Size 1.5MB
- SHA256 a901bd26f786dbcc6a3775d60d3c82cd70e0948f397fdcd551b1988a1a475d9d
- MD5 a455122fa46f40a97061ae0775149d77
- SHA1 b7620560242d1390096745f4c0bc3a8961093473
- SHA512 2108c39e7d231b8c3a1127b65b97149014bd4cc41dcf35a3f2329ee0c4238643a3f05b697cadb9b6f523191a38f97788b0b96523160b37c6065a7e427fb8d28e
- SSDEEP 24576:A3mnXoZjzyaT4aewsAjxTc6r2XlFYTqMi8CtBd2QHCHmTBW5:A3kMPlj7qJtb2I
- TLSH T19E757D22F6B48275D077C475C6E2975AEE3538424B308ACB9389C76D2F237D19A3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory