General
- Target 2026-08-03_97895a95137205cddd2f1801ff024bd2_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 8.1MB
- Sample260804-msbx2sxhrc
- SHA256 446eec43f74278e417957f17002cbaf660791231f5a9523d6aef44e7bdd3ed4f
- MD5 97895a95137205cddd2f1801ff024bd2
- SHA1 bdbf65fc1065a6ae9e67a53da2da86ecc73d0979
- SHA512 a821276dcdbfce9200c0b63f8ed0ccc9abf0e786c6732e4319531772109b23fa5a63e74210b283f3c342f9528e1b159345954f61ba31cc0f40b933e5c6d8fad0
- SSDEEP 196608:7SfG77Vdd6GNXIXbD9cf3D8wYyNPEgFA6FGauQ9+:Z7YCP9FA6saB9+
- TLSH T14786630267FC0418F5F36B799B7A98518A3BBC660B34E5DF00581C5D0B73A829DB6B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_97895a95137205cddd2f1801ff024bd2_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stea.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_97895a95137205cddd2f1801ff024bd2_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stea.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_97895a95137205cddd2f1801ff024bd2_amadey_cobalt-strike_darkgate_glassworm_icedid_luca-stealer_njrat_satacom_stealc_vidar
- Size 8.1MB
- SHA256 446eec43f74278e417957f17002cbaf660791231f5a9523d6aef44e7bdd3ed4f
- MD5 97895a95137205cddd2f1801ff024bd2
- SHA1 bdbf65fc1065a6ae9e67a53da2da86ecc73d0979
- SHA512 a821276dcdbfce9200c0b63f8ed0ccc9abf0e786c6732e4319531772109b23fa5a63e74210b283f3c342f9528e1b159345954f61ba31cc0f40b933e5c6d8fad0
- SSDEEP 196608:7SfG77Vdd6GNXIXbD9cf3D8wYyNPEgFA6FGauQ9+:Z7YCP9FA6saB9+
- TLSH T14786630267FC0418F5F36B799B7A98518A3BBC660B34E5DF00581C5D0B73A829DB6B72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.