General
- Target 2026-07-20_80c2a0c71ed95fe2b82d915775ac0d0e_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_stealc_vidar_wannacry
- Size 2.0MB
- Sample260720-xzw7nset71
- SHA256 bb5f721cfb47af701808c5e2a5c0919a2086293677effb122f1cc698d68ebee4
- MD5 80c2a0c71ed95fe2b82d915775ac0d0e
- SHA1 40ab94e4eaeeb8f9e77fa05f8922ae40e28893e8
- SHA512 cb41ad628276b125bdb35b5c00756d95457f30d7ba0eeddc3e10f6c763437efe1df3688086dc0fd6c74d195ed014d0bf9eadc45f95bd03f4c9296b85618990af
- SSDEEP 24576:A3mnXoZjzyaT4aewsAjx9EaBfJ8EaL73N+tCn50ChWdArKR0Le5ji0hmxNrM:A3kMPljW8tDZqrKRPji0Aj
- TLSH T1D6A57B16FBB482B1D0778174C6A6C676FA7278410B3096CB9394C76D2F336E19E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-20_80c2a0c71ed95fe2b82d915775ac0d0e_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_80c2a0c71ed95fe2b82d915775ac0d0e_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_80c2a0c71ed95fe2b82d915775ac0d0e_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_stealc_vidar_wannacry
- Size 2.0MB
- SHA256 bb5f721cfb47af701808c5e2a5c0919a2086293677effb122f1cc698d68ebee4
- MD5 80c2a0c71ed95fe2b82d915775ac0d0e
- SHA1 40ab94e4eaeeb8f9e77fa05f8922ae40e28893e8
- SHA512 cb41ad628276b125bdb35b5c00756d95457f30d7ba0eeddc3e10f6c763437efe1df3688086dc0fd6c74d195ed014d0bf9eadc45f95bd03f4c9296b85618990af
- SSDEEP 24576:A3mnXoZjzyaT4aewsAjx9EaBfJ8EaL73N+tCn50ChWdArKR0Le5ji0hmxNrM:A3kMPljW8tDZqrKRPji0Aj
- TLSH T1D6A57B16FBB482B1D0778174C6A6C676FA7278410B3096CB9394C76D2F336E19E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory