General
- Target 2026-07-12_b725d82b7487b5b1cba8adb8b6c33e5f_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 2.0MB
- Sample260712-xtncksfx9n
- SHA256 34b715d451d81702c63066e56331089f63a651163f4a43c9ce456aced6c130a6
- MD5 b725d82b7487b5b1cba8adb8b6c33e5f
- SHA1 52b97e041dea37e239a5b4d94ae605865b24471b
- SHA512 3ec4f401a5e9be68388c349288ce78d5152603203823c90355b8be767c3a67666a690078c9cefdedc6eaf0f3d899eba4b117231049c0645f96f5c9b45500b9a8
- SSDEEP 24576:A3mnXoZjzyaT4aewsAjxTc6r2JoNaFZe0p4Ek4niOkl/A04szE87JKTvmlD5Tvib:A3kMPljEeW4SkZP4sz9MbE56rX
- TLSH T12D953B16F6788B22D07BC0B5C5D6AA5AFA333C414F304BCB53459B2C3E276D19A36726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-12_b725d82b7487b5b1cba8adb8b6c33e5f_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_b725d82b7487b5b1cba8adb8b6c33e5f_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_b725d82b7487b5b1cba8adb8b6c33e5f_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 2.0MB
- SHA256 34b715d451d81702c63066e56331089f63a651163f4a43c9ce456aced6c130a6
- MD5 b725d82b7487b5b1cba8adb8b6c33e5f
- SHA1 52b97e041dea37e239a5b4d94ae605865b24471b
- SHA512 3ec4f401a5e9be68388c349288ce78d5152603203823c90355b8be767c3a67666a690078c9cefdedc6eaf0f3d899eba4b117231049c0645f96f5c9b45500b9a8
- SSDEEP 24576:A3mnXoZjzyaT4aewsAjxTc6r2JoNaFZe0p4Ek4niOkl/A04szE87JKTvmlD5Tvib:A3kMPljEeW4SkZP4sz9MbE56rX
- TLSH T12D953B16F6788B22D07BC0B5C5D6AA5AFA333C414F304BCB53459B2C3E276D19A36726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory