General
- Target 2026-08-02_2f5ce6a7ae4d875690822dc2a2f75249_amadey_cloudeye_darkgate_elex_glassworm_hawkeye_icedid_manuscrypt_njrat_rhadamanthys_smoke-loader_stop_wannacry
- Size 5.2MB
- Sample260802-xt26qszela
- SHA256 17a04a89be827fa018360bfa9a3e5954ce0ed420bd59f79247a1ff9f5db17f87
- MD5 2f5ce6a7ae4d875690822dc2a2f75249
- SHA1 fb720d1dc214621c17524d49d4d1ae63ff8feac3
- SHA512 3b5daac562c83ac12c6c5ccfdde8c9041cc6bc6e43acfb14c2cb5b4a141a14cb85ccbb53e11ab73957e58dd66eaa04a84259f3128be37cdd024e50c4ee3126d9
- SSDEEP 98304:v+RYNAKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzl87aW7tPWZ:WmAE9695ta1xP
- TLSH T193466B11B7F88A32E0B38576D9E6AB16AA327C450B3086CF1354B75D1E337D19A36732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-02_2f5ce6a7ae4d875690822dc2a2f75249_amadey_cloudeye_darkgate_elex_glassworm_hawkeye_icedid_m.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_2f5ce6a7ae4d875690822dc2a2f75249_amadey_cloudeye_darkgate_elex_glassworm_hawkeye_icedid_m.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_2f5ce6a7ae4d875690822dc2a2f75249_amadey_cloudeye_darkgate_elex_glassworm_hawkeye_icedid_manuscrypt_njrat_rhadamanthys_smoke-loader_stop_wannacry
- Size 5.2MB
- SHA256 17a04a89be827fa018360bfa9a3e5954ce0ed420bd59f79247a1ff9f5db17f87
- MD5 2f5ce6a7ae4d875690822dc2a2f75249
- SHA1 fb720d1dc214621c17524d49d4d1ae63ff8feac3
- SHA512 3b5daac562c83ac12c6c5ccfdde8c9041cc6bc6e43acfb14c2cb5b4a141a14cb85ccbb53e11ab73957e58dd66eaa04a84259f3128be37cdd024e50c4ee3126d9
- SSDEEP 98304:v+RYNAKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzl87aW7tPWZ:WmAE9695ta1xP
- TLSH T193466B11B7F88A32E0B38576D9E6AB16AA327C450B3086CF1354B75D1E337D19A36732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory