General
- Target 2026-08-03_215b62cb215dbb7aa2769880c55132ed_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_icedid_njrat_smoke-loader_vidar
- Size 5.6MB
- Sample260804-p2f98sw1fz
- SHA256 30c07249f8b6615f18a1484a4f666467076fd61d445aeac016ad426a1b53432b
- MD5 215b62cb215dbb7aa2769880c55132ed
- SHA1 9666361443b955612b872661006c9f9084ad9dd0
- SHA512 fd608cf6b71e55af8351dda2a471d47ccc89aadf8d1fa5d40cf5dad5e78556fe099c7bf11e0271d01e552e7148a8f01747721cda4df55cdb23a9cdfc06938b58
- SSDEEP 49152:BJIUBKy7QeeHFw1IkSKreUnlzevKgBOl9fsaUiDbatPEHF6Z+EK/hvgcEfLUTq0t:AIQ9zNBmsOqQgDNcEanicl53
- TLSH T1B1467D5662F884E5E5BBD5788E76D632EBB17C120630A34F07A0CA8B1F376605E3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_215b62cb215dbb7aa2769880c55132ed_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_ice.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_215b62cb215dbb7aa2769880c55132ed_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_ice.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_215b62cb215dbb7aa2769880c55132ed_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_icedid_njrat_smoke-loader_vidar
- Size 5.6MB
- SHA256 30c07249f8b6615f18a1484a4f666467076fd61d445aeac016ad426a1b53432b
- MD5 215b62cb215dbb7aa2769880c55132ed
- SHA1 9666361443b955612b872661006c9f9084ad9dd0
- SHA512 fd608cf6b71e55af8351dda2a471d47ccc89aadf8d1fa5d40cf5dad5e78556fe099c7bf11e0271d01e552e7148a8f01747721cda4df55cdb23a9cdfc06938b58
- SSDEEP 49152:BJIUBKy7QeeHFw1IkSKreUnlzevKgBOl9fsaUiDbatPEHF6Z+EK/hvgcEfLUTq0t:AIQ9zNBmsOqQgDNcEanicl53
- TLSH T1B1467D5662F884E5E5BBD5788E76D632EBB17C120630A34F07A0CA8B1F376605E3D721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE