General
- Target 2026-08-05_652f0186d40e53565e6fb20188b30a5a_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 1.9MB
- Sample260806-akfvtayhpd
- SHA256 c38f20da1ff39c819619aaf4f155d05c252dcf2a83d202e9b977cd93388c9840
- MD5 652f0186d40e53565e6fb20188b30a5a
- SHA1 9cf236d5b766655c54a48eec937a634bea43cb0c
- SHA512 4effb166ad7d1a97daae2ee218553ec25c1cc30a4483f36bfc7bec041b8c3bdfe6a064e7a4921380d86cfd6440cf0c543006bd112f04f1881832b474ffa885e0
- SSDEEP 24576:A3mnXoZjzyaEFoHaewsAjYaEg6Eaobx43mnXoZjzyaEFoHaewsAjYaEg6EaobxN:A3kM8lj83kM8ljB
- TLSH T1C295B023EB7090B5D27B49705BB58713E7397C210B605ACBE3A88A591F317C06F3A766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-05_652f0186d40e53565e6fb20188b30a5a_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_652f0186d40e53565e6fb20188b30a5a_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_652f0186d40e53565e6fb20188b30a5a_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 1.9MB
- SHA256 c38f20da1ff39c819619aaf4f155d05c252dcf2a83d202e9b977cd93388c9840
- MD5 652f0186d40e53565e6fb20188b30a5a
- SHA1 9cf236d5b766655c54a48eec937a634bea43cb0c
- SHA512 4effb166ad7d1a97daae2ee218553ec25c1cc30a4483f36bfc7bec041b8c3bdfe6a064e7a4921380d86cfd6440cf0c543006bd112f04f1881832b474ffa885e0
- SSDEEP 24576:A3mnXoZjzyaEFoHaewsAjYaEg6Eaobx43mnXoZjzyaEFoHaewsAjYaEg6EaobxN:A3kM8lj83kM8ljB
- TLSH T1C295B023EB7090B5D27B49705BB58713E7397C210B605ACBE3A88A591F317C06F3A766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory