General
- Target 2026-08-03_20fe9c45bfcc42406c97eed3b86d8e77_amadey_blankgrabber_cobalt-strike_coinminer_darkgate_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar_zxxz
- Size 127.1MB
- Sample260803-persfsxcka
- SHA256 f314f4bb8cb542639281ba4645468a3e7b4b7c690398b9e2a5c21e40b722e049
- MD5 20fe9c45bfcc42406c97eed3b86d8e77
- SHA1 2c59a8a3630712da2f3e2d44c4d2ae9fd5584f25
- SHA512 07985bb083e6543897e6cd971508bdaf2635c034029848b358900f941e3eda7ece1ed8224e9532b6a61e8b51ab295fc8801156d1de45a9ce77776c99f385bbfe
- SSDEEP 786432:M9HlkOm63XdIxO1Mi00RXXcimTJdui+0uMskf0GaDmZQ+JYMJSTYT+LClkzsbDH+:M9HlkOj3XOEM1hU0sMEi6
- TLSH T176582A566249056AE3FFE27078664667E662791333F89C83FE4C57040BEB3B23A78741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
7 signatures
Behavioral task
behavioral1
Sample
2026-08-03_20fe9c45bfcc42406c97eed3b86d8e77_amadey_blankgrabber_cobalt-strike_coinminer_darkgate_gla.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_20fe9c45bfcc42406c97eed3b86d8e77_amadey_blankgrabber_cobalt-strike_coinminer_darkgate_gla.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_20fe9c45bfcc42406c97eed3b86d8e77_amadey_blankgrabber_cobalt-strike_coinminer_darkgate_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar_zxxz
- Size 127.1MB
- SHA256 f314f4bb8cb542639281ba4645468a3e7b4b7c690398b9e2a5c21e40b722e049
- MD5 20fe9c45bfcc42406c97eed3b86d8e77
- SHA1 2c59a8a3630712da2f3e2d44c4d2ae9fd5584f25
- SHA512 07985bb083e6543897e6cd971508bdaf2635c034029848b358900f941e3eda7ece1ed8224e9532b6a61e8b51ab295fc8801156d1de45a9ce77776c99f385bbfe
- SSDEEP 786432:M9HlkOm63XdIxO1Mi00RXXcimTJdui+0uMskf0GaDmZQ+JYMJSTYT+LClkzsbDH+:M9HlkOj3XOEM1hU0sMEi6
- TLSH T176582A566249056AE3FFE27078664667E662791333F89C83FE4C57040BEB3B23A78741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.