General
- Target 2026-07-30_ec851ff2a5b59120f06a565fc34ff398_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 25.9MB
- Sample260730-bfannszta1
- SHA256 5e0702d2c9fcea3e95114ceb5e8d44aa917e47c5f6f82c667c2a511ad852ab81
- MD5 ec851ff2a5b59120f06a565fc34ff398
- SHA1 0fa65f5af5ace2141afeb506dba49fb1bfd44da1
- SHA512 7c81f321d2547c2086040eed915a9e6ccd2eb1fca4506d016d615bfee8d0e253af0e717bb000f5ba77e1f3bf86c8da11925e133af708364db05640c9c6cf2712
- SSDEEP 196608:Qi8kL3HxzOGhi8kL3HxzOGii8kL3HxzOGhi8kL3HxzOGlALO:IkL3R5kL3RqkL3R5kL3R5oO
- TLSH T192579F03B6E440EDD06BC634C6259632EA72BC561720DADF6698F65A1F33BD05F36322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_ec851ff2a5b59120f06a565fc34ff398_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_ec851ff2a5b59120f06a565fc34ff398_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_ec851ff2a5b59120f06a565fc34ff398_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 25.9MB
- SHA256 5e0702d2c9fcea3e95114ceb5e8d44aa917e47c5f6f82c667c2a511ad852ab81
- MD5 ec851ff2a5b59120f06a565fc34ff398
- SHA1 0fa65f5af5ace2141afeb506dba49fb1bfd44da1
- SHA512 7c81f321d2547c2086040eed915a9e6ccd2eb1fca4506d016d615bfee8d0e253af0e717bb000f5ba77e1f3bf86c8da11925e133af708364db05640c9c6cf2712
- SSDEEP 196608:Qi8kL3HxzOGhi8kL3HxzOGii8kL3HxzOGhi8kL3HxzOGlALO:IkL3R5kL3RqkL3R5kL3R5oO
- TLSH T192579F03B6E440EDD06BC634C6259632EA72BC561720DADF6698F65A1F33BD05F36322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application