General
- Target 2026-07-18_5d4e87e815e2623d8a003c01ad13457a_amadey_cobalt-strike_darkgate_elex_icedid_luca-stealer_magniber_metamorfo_njrat_smoke-loader_stealc_vidar
- Size 13.3MB
- Sample260718-jqvqlags8x
- SHA256 8561abacea0328f5b57fac12ea79d7a61bea21f77f08dc3139367da12a0d8a78
- MD5 5d4e87e815e2623d8a003c01ad13457a
- SHA1 38e8ea83bcb3635de2a4575e447185e9a3783ce5
- SHA512 d33c52329ddf70ff3b22f3b1b6fd5f29c7d4176d9ca313af2399805e82e2f9cd9d06e8972ff0db5f413cff07a7098e8c55741784bb8515aa7d535f1d13d77c5f
- SSDEEP 196608:cEfXTakjrdoHVpCEucu0IyHVoHQ+Gg3+h8idkg3DU/0MXbp6XR/OrfqjYS4O7NAs:cmX9d0pCEAHh+j/3woh/N7r
- TLSH T1E2E6C0107A4E407AD4A25170892BAE7BE3BDFC600B3545DB52947B2E2F337C31A3A756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_5d4e87e815e2623d8a003c01ad13457a_amadey_cobalt-strike_darkgate_elex_icedid_luca-stealer_m.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_5d4e87e815e2623d8a003c01ad13457a_amadey_cobalt-strike_darkgate_elex_icedid_luca-stealer_m.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_5d4e87e815e2623d8a003c01ad13457a_amadey_cobalt-strike_darkgate_elex_icedid_luca-stealer_magniber_metamorfo_njrat_smoke-loader_stealc_vidar
- Size 13.3MB
- SHA256 8561abacea0328f5b57fac12ea79d7a61bea21f77f08dc3139367da12a0d8a78
- MD5 5d4e87e815e2623d8a003c01ad13457a
- SHA1 38e8ea83bcb3635de2a4575e447185e9a3783ce5
- SHA512 d33c52329ddf70ff3b22f3b1b6fd5f29c7d4176d9ca313af2399805e82e2f9cd9d06e8972ff0db5f413cff07a7098e8c55741784bb8515aa7d535f1d13d77c5f
- SSDEEP 196608:cEfXTakjrdoHVpCEucu0IyHVoHQ+Gg3+h8idkg3DU/0MXbp6XR/OrfqjYS4O7NAs:cmX9d0pCEAHh+j/3woh/N7r
- TLSH T1E2E6C0107A4E407AD4A25170892BAE7BE3BDFC600B3545DB52947B2E2F337C31A3A756
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables referencing many IR and analysis tools
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.