General
- Target 2026-08-10_4004a98e0ba66881ec3e1ee57bf3138e_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 1.8MB
- Sample260810-kjshbsfa47
- SHA256 0af8b83f13b91fb34d4f4bc01aa6fd36099f8715f72ea26c4294130b15687372
- MD5 4004a98e0ba66881ec3e1ee57bf3138e
- SHA1 4e900904bdf0f8017579bc1739b67116fbda787c
- SHA512 fd04fb7796c13af81972824fc4c55c749dfd18ff9bf2073e3f6fc0c9a4a6081f3c62c6958504107e4f4793eb1c99b1a5379658f5ea0f643685fe9c5582a402b6
- SSDEEP 24576:A3mnXoZjzyaT4aewsAjl5SaRa8eYTqMi8CtBd2QHCHmTBW5w5jcAkSYqyE:A3kMPljVqJtb2IRpYq
- TLSH T17C954C26F6748275D077C0B9C6D2AB5AEE3134414B308ACB5389D76C2F277D29A3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_4004a98e0ba66881ec3e1ee57bf3138e_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_4004a98e0ba66881ec3e1ee57bf3138e_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_4004a98e0ba66881ec3e1ee57bf3138e_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 1.8MB
- SHA256 0af8b83f13b91fb34d4f4bc01aa6fd36099f8715f72ea26c4294130b15687372
- MD5 4004a98e0ba66881ec3e1ee57bf3138e
- SHA1 4e900904bdf0f8017579bc1739b67116fbda787c
- SHA512 fd04fb7796c13af81972824fc4c55c749dfd18ff9bf2073e3f6fc0c9a4a6081f3c62c6958504107e4f4793eb1c99b1a5379658f5ea0f643685fe9c5582a402b6
- SSDEEP 24576:A3mnXoZjzyaT4aewsAjl5SaRa8eYTqMi8CtBd2QHCHmTBW5w5jcAkSYqyE:A3kMPljVqJtb2IRpYq
- TLSH T17C954C26F6748275D077C0B9C6D2AB5AEE3134414B308ACB5389D76C2F277D29A3A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory