General
- Target 2026-08-09_4b72e738ab746cefd7e781d963719dc0_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_njrat_swisyn_wannacry
- Size 804KB
- Sample260809-jpqegsw1fz
- SHA256 77b3a43086e9136d11b6b34882938df25dede61161cc774c536292f707390e29
- MD5 4b72e738ab746cefd7e781d963719dc0
- SHA1 b2770aba7f62253ed892359ff50ac6f28c64a92c
- SHA512 57d4cc70e14d79c9dc3b21188b5230d8384aadfa3ea711f503e60ab45a37a5490124cce73c3118eca8ac5d64fed8cc4eb092c9db8b8bc34fb94e4a67ba592022
- SSDEEP 12288:PFUNDaSz14TZYCdvf/WCCr8+bNlz+OeO+OeNhBBhhBBHClpYZjMsYEe1azQ3+04B:PFOaSq1fObNlS3OsQaKZSqw7m9dgkC
- TLSH T139059F31B683C43AC47101F01D7CEBAA742EBD260BA15EDB73C85B2959351D32E71A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_4b72e738ab746cefd7e781d963719dc0_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_njrat_swisyn_wannacry.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_4b72e738ab746cefd7e781d963719dc0_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_njrat_swisyn_wannacry.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_4b72e738ab746cefd7e781d963719dc0_amadey_cobalt-strike_darkgate_elex_glassworm_luca-stealer_njrat_swisyn_wannacry
- Size 804KB
- SHA256 77b3a43086e9136d11b6b34882938df25dede61161cc774c536292f707390e29
- MD5 4b72e738ab746cefd7e781d963719dc0
- SHA1 b2770aba7f62253ed892359ff50ac6f28c64a92c
- SHA512 57d4cc70e14d79c9dc3b21188b5230d8384aadfa3ea711f503e60ab45a37a5490124cce73c3118eca8ac5d64fed8cc4eb092c9db8b8bc34fb94e4a67ba592022
- SSDEEP 12288:PFUNDaSz14TZYCdvf/WCCr8+bNlz+OeO+OeNhBBhhBBHClpYZjMsYEe1azQ3+04B:PFOaSq1fObNlS3OsQaKZSqw7m9dgkC
- TLSH T139059F31B683C43AC47101F01D7CEBAA742EBD260BA15EDB73C85B2959351D32E71A6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory