General
- Target 2026-08-06_461bf66b3dab1dec0b718f3334fdba2a_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar
- Size 1.5MB
- Sample260806-27ed2ssfqg
- SHA256 3552dc4bc78618615f7ee990e3f29c0394be36b5b21e0a8c2293df91f1f043d3
- MD5 461bf66b3dab1dec0b718f3334fdba2a
- SHA1 5970ce9d6e2fed007c54b2149e612a75cec4af05
- SHA512 a325d3cc171209a2eb4455dc197a1670f3d5865f299c9e400484eee79ad6be4bfc8cb154cbdf8e760e6382d7201fe951919aeb3307684f1fb8a3123528f5890d
- SSDEEP 24576:A3mnXoZjzyaTjBaewsAjY0D5Tvinrmh5jcAkSYqyE:A3kM0ljh56rapYq
- TLSH T199655B22F6648B75D07F80B5CA929656EA333C510F304BCB53949E693F336D19A3A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-06_461bf66b3dab1dec0b718f3334fdba2a_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_461bf66b3dab1dec0b718f3334fdba2a_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_461bf66b3dab1dec0b718f3334fdba2a_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar
- Size 1.5MB
- SHA256 3552dc4bc78618615f7ee990e3f29c0394be36b5b21e0a8c2293df91f1f043d3
- MD5 461bf66b3dab1dec0b718f3334fdba2a
- SHA1 5970ce9d6e2fed007c54b2149e612a75cec4af05
- SHA512 a325d3cc171209a2eb4455dc197a1670f3d5865f299c9e400484eee79ad6be4bfc8cb154cbdf8e760e6382d7201fe951919aeb3307684f1fb8a3123528f5890d
- SSDEEP 24576:A3mnXoZjzyaTjBaewsAjY0D5Tvinrmh5jcAkSYqyE:A3kM0ljh56rapYq
- TLSH T199655B22F6648B75D07F80B5CA929656EA333C510F304BCB53949E693F336D19A3A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory