General
- Target 2026-08-04_7f6138a934f37d2ae36246f053290aad_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_smoke-loader_stealc_vidar_xworm
- Size 964KB
- Sample260804-hd48tsee49
- SHA256 91bd2ecbcb8721ed98bfce3180d959fb5522414874adfe8ea1ca80fb58eab649
- MD5 7f6138a934f37d2ae36246f053290aad
- SHA1 084348de8d9b6ce3c0895e127ee494e0adf5cd01
- SHA512 4f096c20701e879eed405f1b24c400934c1d127153a85de732ad91abe64fd35a16576927cbcfacd0bf2ed11ee96ddbacd243d78142b6a577772a096964e3092b
- SSDEEP 24576:693gejLlJRK5MfIB6441wesB32cOB8omNZjxy/P:DSfn440xL88ooZ1uP
- TLSH T11B25BF13F6A14079E5B352B08DBA75159ABC7D660732CA9F13C80A1D1E726D0AF3E732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_7f6138a934f37d2ae36246f053290aad_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stea.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_7f6138a934f37d2ae36246f053290aad_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stea.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_7f6138a934f37d2ae36246f053290aad_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_remcos_ryuk_satacom_smoke-loader_stealc_vidar_xworm
- Size 964KB
- SHA256 91bd2ecbcb8721ed98bfce3180d959fb5522414874adfe8ea1ca80fb58eab649
- MD5 7f6138a934f37d2ae36246f053290aad
- SHA1 084348de8d9b6ce3c0895e127ee494e0adf5cd01
- SHA512 4f096c20701e879eed405f1b24c400934c1d127153a85de732ad91abe64fd35a16576927cbcfacd0bf2ed11ee96ddbacd243d78142b6a577772a096964e3092b
- SSDEEP 24576:693gejLlJRK5MfIB6441wesB32cOB8omNZjxy/P:DSfn440xL88ooZ1uP
- TLSH T11B25BF13F6A14079E5B352B08DBA75159ABC7D660732CA9F13C80A1D1E726D0AF3E732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association