General
- Target 2026-07-06_c04375b23fb5c937220bc2bf6ed97629_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_satacom_smoke-loader_wannacry
- Size 583KB
- Sample260707-bjs97ab12j
- SHA256 28a92e460307fc147fb21b3013d818c22d8675fe8ad684f87022f98ceeafbe63
- MD5 c04375b23fb5c937220bc2bf6ed97629
- SHA1 86b34252d25975b9fa710f1ecc19b28c880ef4f7
- SHA512 a177fb57c09bb8b1e5bb1005689b58124af6e4eadf6df99d3c071b145753be5f5540bc3b4f3153914e88fe8cbbe786834eaaa1b5d6c71170d4b89b6f55e68050
- SSDEEP 12288:AEFoCAwSfxL/2Dc3jDLLmt0LDQewsAjR2aEg6EaoL0a:AEFoHaewsAjYaEg6EaoLN
- TLSH T11AD49D22EE74D432E77B0D712AB58706587DBE114B914AC7E3B88A4D0E303C16776B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_c04375b23fb5c937220bc2bf6ed97629_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_c04375b23fb5c937220bc2bf6ed97629_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijacklo.exe
Resource
win11ltsc2024-20260706-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_c04375b23fb5c937220bc2bf6ed97629_amadey_cobalt-strike_darkgate_glassworm_hawkeye_hijackloader_satacom_smoke-loader_wannacry
- Size 583KB
- SHA256 28a92e460307fc147fb21b3013d818c22d8675fe8ad684f87022f98ceeafbe63
- MD5 c04375b23fb5c937220bc2bf6ed97629
- SHA1 86b34252d25975b9fa710f1ecc19b28c880ef4f7
- SHA512 a177fb57c09bb8b1e5bb1005689b58124af6e4eadf6df99d3c071b145753be5f5540bc3b4f3153914e88fe8cbbe786834eaaa1b5d6c71170d4b89b6f55e68050
- SSDEEP 12288:AEFoCAwSfxL/2Dc3jDLLmt0LDQewsAjR2aEg6EaoL0a:AEFoHaewsAjYaEg6EaoLN
- TLSH T11AD49D22EE74D432E77B0D712AB58706587DBE114B914AC7E3B88A4D0E303C16776B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.