General
- Target 2026-07-15_7466bfbfae019bb99b80be9d9f5e6781_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_stealc_vidar_wannacry
- Size 2.1MB
- Sample260715-vf28gahs2n
- SHA256 33a1997a10bec0ff49f2787a2ead22349b7b7157ae4976f97b829ce9cd6e91a1
- MD5 7466bfbfae019bb99b80be9d9f5e6781
- SHA1 a860bcbf755515ce86148fccb94f4cf928d6aa90
- SHA512 49237fca9aa76a08fe06770fc7cab1e4115705fc1840f18b7542daec2bd55217e0fdff33b4373774e7b97f9a627fecd91c2c25cfc1f1ff5e42c29b4fd18ef4ef
- SSDEEP 24576:A3mnXoZjzyaEFoHaewsAjYaEg69hOgZL3N+tCn50ChWdArKziwF:A3kM8ljy8tDZqrKzii
- TLSH T12FA55A83EBA19DF1F15E443089568239E236BE580BD34A9B525DFF1E5F322C42AF8714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-15_7466bfbfae019bb99b80be9d9f5e6781_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_7466bfbfae019bb99b80be9d9f5e6781_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260710-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_7466bfbfae019bb99b80be9d9f5e6781_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_stealc_vidar_wannacry
- Size 2.1MB
- SHA256 33a1997a10bec0ff49f2787a2ead22349b7b7157ae4976f97b829ce9cd6e91a1
- MD5 7466bfbfae019bb99b80be9d9f5e6781
- SHA1 a860bcbf755515ce86148fccb94f4cf928d6aa90
- SHA512 49237fca9aa76a08fe06770fc7cab1e4115705fc1840f18b7542daec2bd55217e0fdff33b4373774e7b97f9a627fecd91c2c25cfc1f1ff5e42c29b4fd18ef4ef
- SSDEEP 24576:A3mnXoZjzyaEFoHaewsAjYaEg69hOgZL3N+tCn50ChWdArKziwF:A3kM8ljy8tDZqrKzii
- TLSH T12FA55A83EBA19DF1F15E443089568239E236BE580BD34A9B525DFF1E5F322C42AF8714
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory