General
- Target 2026-07-06_f13bf9979e139cc4a655d923f20ff232_amadey_cobalt-strike_darkgate_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_satacom_smoke-loader_vidar_wannacry
- Size 17.3MB
- Sample260707-aay9eaay4r
- SHA256 4a33a6aedde7dd7fa81c25d80a6191c8ae68a6af88f9d5293e5fe8a71c178954
- MD5 f13bf9979e139cc4a655d923f20ff232
- SHA1 d44c9f5e016f0504d6496d69eafe3b7da8f411c0
- SHA512 156484042f4fa4d32df7a189b6577a25744c34a9d811230b1fb6aa5490f42b294ca73780dc80cdd73b9dbafbc6f7b728994d34d8df7a4a3d47f2e74c1a2369e8
- SSDEEP 196608:I/h1+Qw/h1+cw/h6WyZ/K0ttYVAATww/h1+Qw/h1+cw/h6WyZ/K0ttYVAAT:0yZ/K0ttYZTfyZ/K0ttYZT
- TLSH T18D077D13F1A441B5E06AD174CAA69736EB327C4547B096CF2241F7A82F376D0BB39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_f13bf9979e139cc4a655d923f20ff232_amadey_cobalt-strike_darkgate_emotet_glassworm_hawkeye_h.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_f13bf9979e139cc4a655d923f20ff232_amadey_cobalt-strike_darkgate_emotet_glassworm_hawkeye_h.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_f13bf9979e139cc4a655d923f20ff232_amadey_cobalt-strike_darkgate_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_satacom_smoke-loader_vidar_wannacry
- Size 17.3MB
- SHA256 4a33a6aedde7dd7fa81c25d80a6191c8ae68a6af88f9d5293e5fe8a71c178954
- MD5 f13bf9979e139cc4a655d923f20ff232
- SHA1 d44c9f5e016f0504d6496d69eafe3b7da8f411c0
- SHA512 156484042f4fa4d32df7a189b6577a25744c34a9d811230b1fb6aa5490f42b294ca73780dc80cdd73b9dbafbc6f7b728994d34d8df7a4a3d47f2e74c1a2369e8
- SSDEEP 196608:I/h1+Qw/h1+cw/h6WyZ/K0ttYVAATww/h1+Qw/h1+cw/h6WyZ/K0ttYVAAT:0yZ/K0ttYZTfyZ/K0ttYZT
- TLSH T18D077D13F1A441B5E06AD174CAA69736EB327C4547B096CF2241F7A82F376D0BB39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.