General
- Target 2026-07-10_74127a398c678da1df9ae7c5842dce0e_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_smoke-loader_vidar_wannacry
- Size 2.9MB
- Sample260710-yx4dmsgw2q
- SHA256 ba968d41a402e150315c6fed683fdc14bc93e89b2fe0c2a42d3d40014cc35492
- MD5 74127a398c678da1df9ae7c5842dce0e
- SHA1 56c0da510192de949a60319d288cfd0e89c318e7
- SHA512 3c591453092b9219c228fc284a0dc05561258e28407e22013d160174127b5aecb548266389d1489d51fc756da66994afd86bb17d1019ca9a05047a3bbff64002
- SSDEEP 49152:A3k03kB56rveW4SkZP4sz9Mb5eW4SkZP4sz9MbKlju:A3k03kCrffkZcNfkZc3
- TLSH T15AE52B16F6788723D0B7C0B9C5D6AA5AF93238455F308ACB0349DB2C2E277D1963573A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-10_74127a398c678da1df9ae7c5842dce0e_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_74127a398c678da1df9ae7c5842dce0e_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_74127a398c678da1df9ae7c5842dce0e_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_smoke-loader_vidar_wannacry
- Size 2.9MB
- SHA256 ba968d41a402e150315c6fed683fdc14bc93e89b2fe0c2a42d3d40014cc35492
- MD5 74127a398c678da1df9ae7c5842dce0e
- SHA1 56c0da510192de949a60319d288cfd0e89c318e7
- SHA512 3c591453092b9219c228fc284a0dc05561258e28407e22013d160174127b5aecb548266389d1489d51fc756da66994afd86bb17d1019ca9a05047a3bbff64002
- SSDEEP 49152:A3k03kB56rveW4SkZP4sz9Mb5eW4SkZP4sz9MbKlju:A3k03kCrffkZcNfkZc3
- TLSH T15AE52B16F6788723D0B7C0B9C5D6AA5AF93238455F308ACB0349DB2C2E277D1963573A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory