General
- Target 2026-08-01_694f2e7123e16c933060173343f790e9_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar
- Size 567KB
- Sample260801-ftbkcaycqe
- SHA256 7acc9fefeb1e812c4791d3748e536f0b9b703b2c476317616b4d419a752f7841
- MD5 694f2e7123e16c933060173343f790e9
- SHA1 968321c92539457db499d1e5850bf69509744530
- SHA512 be94183eb3a63024d49e53ffb5b4df6aea4f3554bae17d28fc36dd2e0e041da4eef2a63d9a1c6e5d47bcb3aaf9694a281237657439520ed4a1f2d44b4f8ab4e8
- SSDEEP 12288:uw532+RWlfVAwSfxL/2Dc3jDLLmt0LDQewsAjRp:XRy2aewsAjj
- TLSH T125C4AD31FBB4D037C6BF0DB25B75C716683DBA200B6119C7E3A88A9D59203D16736A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_694f2e7123e16c933060173343f790e9_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_694f2e7123e16c933060173343f790e9_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_694f2e7123e16c933060173343f790e9_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar
- Size 567KB
- SHA256 7acc9fefeb1e812c4791d3748e536f0b9b703b2c476317616b4d419a752f7841
- MD5 694f2e7123e16c933060173343f790e9
- SHA1 968321c92539457db499d1e5850bf69509744530
- SHA512 be94183eb3a63024d49e53ffb5b4df6aea4f3554bae17d28fc36dd2e0e041da4eef2a63d9a1c6e5d47bcb3aaf9694a281237657439520ed4a1f2d44b4f8ab4e8
- SSDEEP 12288:uw532+RWlfVAwSfxL/2Dc3jDLLmt0LDQewsAjRp:XRy2aewsAjj
- TLSH T125C4AD31FBB4D037C6BF0DB25B75C716683DBA200B6119C7E3A88A9D59203D16736A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory