General
- Target 2026-08-05_1859a7782c8289a05b48a02e233766ad_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 9.0MB
- Sample260805-1jymcaxbnd
- SHA256 691ceb9f39cad150282178f3a9f964efbe7adbaf655755eea639c7c6e94d1d9a
- MD5 1859a7782c8289a05b48a02e233766ad
- SHA1 de5512c13b7b9373e753cf546764e304ea0e1996
- SHA512 4c3f314bbf368f2debc5065cc22ff99709f1dc1b7cda3a4814a3752c49413c8d9384bfe8305e47e4f8479dddae2ea0bc64387cfa0868480f989decc12c7a8e11
- SSDEEP 196608:vjBxcO4TH9+ljv0eGZF6bUpMBF1p/kjRm4OWi2bH:/aYQIbUwF1VERmj2bH
- TLSH T159A6021277F44CB1E1B3417699B5EA359A76FC200720D2CF13959A5A6F336C29A3B323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-05_1859a7782c8289a05b48a02e233766ad_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_1859a7782c8289a05b48a02e233766ad_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_1859a7782c8289a05b48a02e233766ad_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar_wannacry
- Size 9.0MB
- SHA256 691ceb9f39cad150282178f3a9f964efbe7adbaf655755eea639c7c6e94d1d9a
- MD5 1859a7782c8289a05b48a02e233766ad
- SHA1 de5512c13b7b9373e753cf546764e304ea0e1996
- SHA512 4c3f314bbf368f2debc5065cc22ff99709f1dc1b7cda3a4814a3752c49413c8d9384bfe8305e47e4f8479dddae2ea0bc64387cfa0868480f989decc12c7a8e11
- SSDEEP 196608:vjBxcO4TH9+ljv0eGZF6bUpMBF1p/kjRm4OWi2bH:/aYQIbUwF1VERmj2bH
- TLSH T159A6021277F44CB1E1B3417699B5EA359A76FC200720D2CF13959A5A6F336C29A3B323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory