General
- Target 2026-08-04_e918898d35cdc17bd8a693fc12fbdfe7_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_smoke-loader
- Size 25.5MB
- Sample260805-aeka2stdlh
- SHA256 96083d34162e44b4ba6b3368214b13cf54abf4a31b048e80f2ee9fb619a0d968
- MD5 e918898d35cdc17bd8a693fc12fbdfe7
- SHA1 e20dca5e7f8745bfc6997a0ff2f01f7bd95913e1
- SHA512 f32ab0765a4a2e25216f5c560f6aa04c730127be0097d3dd3999106236eb73cfedd91c1b4bff68351e5f556cd9539fc08b1723d348dadbd6dcd62a74591bf866
- SSDEEP 196608:63SV8cTe5pU+7z/aplDCagDvznsEKCs6Nu3usz1G:63SGccUgCp5CagDrn+z4
- TLSH T1D1472795B1A807D2F3A6E5344576A233E2B17C1E2762D23B0D38F50ADEB77802D19F25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_e918898d35cdc17bd8a693fc12fbdfe7_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_e918898d35cdc17bd8a693fc12fbdfe7_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_e918898d35cdc17bd8a693fc12fbdfe7_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_smoke-loader
- Size 25.5MB
- SHA256 96083d34162e44b4ba6b3368214b13cf54abf4a31b048e80f2ee9fb619a0d968
- MD5 e918898d35cdc17bd8a693fc12fbdfe7
- SHA1 e20dca5e7f8745bfc6997a0ff2f01f7bd95913e1
- SHA512 f32ab0765a4a2e25216f5c560f6aa04c730127be0097d3dd3999106236eb73cfedd91c1b4bff68351e5f556cd9539fc08b1723d348dadbd6dcd62a74591bf866
- SSDEEP 196608:63SV8cTe5pU+7z/aplDCagDvznsEKCs6Nu3usz1G:63SGccUgCp5CagDrn+z4
- TLSH T1D1472795B1A807D2F3A6E5344576A233E2B17C1E2762D23B0D38F50ADEB77802D19F25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE