General
- Target 2026-08-09_a8e038347e40dab21615aa00ad524eb7_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 1.6MB
- Sample260809-tpp4ts1fqf
- SHA256 6de57c887626341f5fbc5076b3011a6dfa9c4fbabf9349d5845bf84a221320fc
- MD5 a8e038347e40dab21615aa00ad524eb7
- SHA1 50a5ba22a6299bdd9546303353f6d1e1220b8fc5
- SHA512 d34e07894d228f05d44798ae152b9a26bae94bb40452f902f45bd9a0382dcfa4a956bd5d84802030cca10b4bbe7d8537976a3a48479d9373cb045590c6df9895
- SSDEEP 24576:A3mnXoZjzyaEFoHaewsAjYaEpm63bA/0Le5ji0hmxNrM:A3kM8lj1Pji0Aj
- TLSH T106755B22F6648275D07F8075C7A29656FA3338510BF08ACB53D4D67C2F227D19ABA723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_a8e038347e40dab21615aa00ad524eb7_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_a8e038347e40dab21615aa00ad524eb7_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_a8e038347e40dab21615aa00ad524eb7_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 1.6MB
- SHA256 6de57c887626341f5fbc5076b3011a6dfa9c4fbabf9349d5845bf84a221320fc
- MD5 a8e038347e40dab21615aa00ad524eb7
- SHA1 50a5ba22a6299bdd9546303353f6d1e1220b8fc5
- SHA512 d34e07894d228f05d44798ae152b9a26bae94bb40452f902f45bd9a0382dcfa4a956bd5d84802030cca10b4bbe7d8537976a3a48479d9373cb045590c6df9895
- SSDEEP 24576:A3mnXoZjzyaEFoHaewsAjYaEpm63bA/0Le5ji0hmxNrM:A3kM8lj1Pji0Aj
- TLSH T106755B22F6648275D07F8075C7A29656FA3338510BF08ACB53D4D67C2F227D19ABA723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory