General
- Target 2026-08-03_0e96b267339bec2771260818484537d7_amadey_cobalt-strike_darkgate_elex_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 20.5MB
- Sample260804-qa8e3s1drh
- SHA256 3389e9104ad3a4be90fd5261d22991ee0479914ac65afeff26823ad943b981e7
- MD5 0e96b267339bec2771260818484537d7
- SHA1 4a1e9cb05863441bead1186a5ea4a2d05c682f1f
- SHA512 e3b158493de6594e233893deb52e5a5d6532cb2c7b447de52b0ea43b3aa0a385d10523a089efe28e86c71cbec6e84189c5651eca41ab6ec74bebcfd2db61eb97
- SSDEEP 98304:wMMMMCVNBw4MLMMMMCVNBw4MsMMMMCVNBw4MLMMMMCVNBw4MwA91pH2WpjHrgBFK:dhYhVmHpn6F44IAWvZ
- TLSH T1BD278E90B5E648E5E56A913D49F7C372D638BDE246328B4B533CE6271F23B902CA4713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-03_0e96b267339bec2771260818484537d7_amadey_cobalt-strike_darkgate_elex_glassworm_icedid_luca.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_0e96b267339bec2771260818484537d7_amadey_cobalt-strike_darkgate_elex_glassworm_icedid_luca.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_0e96b267339bec2771260818484537d7_amadey_cobalt-strike_darkgate_elex_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 20.5MB
- SHA256 3389e9104ad3a4be90fd5261d22991ee0479914ac65afeff26823ad943b981e7
- MD5 0e96b267339bec2771260818484537d7
- SHA1 4a1e9cb05863441bead1186a5ea4a2d05c682f1f
- SHA512 e3b158493de6594e233893deb52e5a5d6532cb2c7b447de52b0ea43b3aa0a385d10523a089efe28e86c71cbec6e84189c5651eca41ab6ec74bebcfd2db61eb97
- SSDEEP 98304:wMMMMCVNBw4MLMMMMCVNBw4MsMMMMCVNBw4MLMMMMCVNBw4MwA91pH2WpjHrgBFK:dhYhVmHpn6F44IAWvZ
- TLSH T1BD278E90B5E648E5E56A913D49F7C372D638BDE246328B4B533CE6271F23B902CA4713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1