General
- Target 2026-08-12_ecc1f38f4059e7362d28dfd4a420d574_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_vidar_wannacry
- Size 11.2MB
- Sample260812-1mjbtseh89
- SHA256 bae9dc5b955c3e2bda1c0ecf0c6301c333718b028ad44e01d9a652a8fa9fc6bb
- MD5 ecc1f38f4059e7362d28dfd4a420d574
- SHA1 b012356c2b83601bcd95d7a0576461f3144e2ccb
- SHA512 75d15f835f6397726d650f4982687bece3dfb60032e12c5cd6cb8b29385b3dfdcab23cd36699f4a4c693b8ed7cd65b5dd7c4984d6a907d6033a6e0fe626abc60
- SSDEEP 196608:jjBxcO4jjAB2S9+ULdNYqrjBxcO4jjAB2S9+ULdNYqrjBxcO4jjAB2S9+ULdNYqf:zl2SlLdNBbl2SlLdNBbl2SlLdNBf
- TLSH T1DDC6BE1373D18036E9732270496DA77A96BEFA300B3185DB53809E2E7F716C19A36397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-12_ecc1f38f4059e7362d28dfd4a420d574_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_ecc1f38f4059e7362d28dfd4a420d574_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_ecc1f38f4059e7362d28dfd4a420d574_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_vidar_wannacry
- Size 11.2MB
- SHA256 bae9dc5b955c3e2bda1c0ecf0c6301c333718b028ad44e01d9a652a8fa9fc6bb
- MD5 ecc1f38f4059e7362d28dfd4a420d574
- SHA1 b012356c2b83601bcd95d7a0576461f3144e2ccb
- SHA512 75d15f835f6397726d650f4982687bece3dfb60032e12c5cd6cb8b29385b3dfdcab23cd36699f4a4c693b8ed7cd65b5dd7c4984d6a907d6033a6e0fe626abc60
- SSDEEP 196608:jjBxcO4jjAB2S9+ULdNYqrjBxcO4jjAB2S9+ULdNYqrjBxcO4jjAB2S9+ULdNYqf:zl2SlLdNBbl2SlLdNBbl2SlLdNBf
- TLSH T1DDC6BE1373D18036E9732270496DA77A96BEFA300B3185DB53809E2E7F716C19A36397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory