General
- Target 2026-07-14_1a22c90ed74d74ed0ee63faf88fdec5b_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_remcos_vidar
- Size 6.9MB
- Sample260714-e2agksgv2z
- SHA256 1bda78b64ef60eefe94d23664a29fb75e3614c8178b8aa40c1867c5a870abcba
- MD5 1a22c90ed74d74ed0ee63faf88fdec5b
- SHA1 2e1c01682f83b2ef291fc75c2ee190a7d3050708
- SHA512 f25e08b509444ac3d5193e99177008d2b55660b7ef631ece009f4efa067649d3d72ae023df7a827d794c801e3efe888df5d4f8ccfb1dc07a51da0b8533351a6d
- SSDEEP 98304:BhV1Z62UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtGh1hN5DTlFp:BL62S9+ULdNPtbuPZOOmnqogHh/p
- TLSH T1C676E02EFB948036D55B127398289231DA7AF574E7258FC72388971DFB702C36E32196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_1a22c90ed74d74ed0ee63faf88fdec5b_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_1a22c90ed74d74ed0ee63faf88fdec5b_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_1a22c90ed74d74ed0ee63faf88fdec5b_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_remcos_vidar
- Size 6.9MB
- SHA256 1bda78b64ef60eefe94d23664a29fb75e3614c8178b8aa40c1867c5a870abcba
- MD5 1a22c90ed74d74ed0ee63faf88fdec5b
- SHA1 2e1c01682f83b2ef291fc75c2ee190a7d3050708
- SHA512 f25e08b509444ac3d5193e99177008d2b55660b7ef631ece009f4efa067649d3d72ae023df7a827d794c801e3efe888df5d4f8ccfb1dc07a51da0b8533351a6d
- SSDEEP 98304:BhV1Z62UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtGh1hN5DTlFp:BL62S9+ULdNPtbuPZOOmnqogHh/p
- TLSH T1C676E02EFB948036D55B127398289231DA7AF574E7258FC72388971DFB702C36E32196
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory