General
- Target 2026-08-19_ffad50fef827f24bcfe59a9323bb894f_amadey_cobalt-strike_darkgate_icedid_luca-stealer_njrat_redline-stealer_ryuk_satacom_stealc_vidar_xworm
- Size 47.1MB
- Sample260819-d8a61sdj2x
- SHA256 fa7cdba9f33308238e437d9082544d78473a27e296d793f72d77f8b9d69b5c23
- MD5 ffad50fef827f24bcfe59a9323bb894f
- SHA1 5f5f8be414752ed81a028a9f363b0720498ed544
- SHA512 63d7131ccd1788b67db9dd4a3ae7ea1f7470a72b636241c9ae51e2fe719099ec07efe23773dbbb9e3fe92870c12fb263f1d9fd15ae06ffc40d37520c4d48ed4b
- SSDEEP 786432:6nJNoBpNAugxw7YySKRuFvIG+X2KT0txqE1VSrI8pQIS7dMlf7mB4JA+s61P3kq:6nI/Zrbo+AtxqyEIGQHdMlf7E4JA+s65
- TLSH T16AB72312ABD44079F2F79271697A6375467ABC702F32CACF62803A5E1B749D1D832723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_ffad50fef827f24bcfe59a9323bb894f_amadey_cobalt-strike_darkgate_icedid_luca-stealer_njrat_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_ffad50fef827f24bcfe59a9323bb894f_amadey_cobalt-strike_darkgate_icedid_luca-stealer_njrat_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_ffad50fef827f24bcfe59a9323bb894f_amadey_cobalt-strike_darkgate_icedid_luca-stealer_njrat_redline-stealer_ryuk_satacom_stealc_vidar_xworm
- Size 47.1MB
- SHA256 fa7cdba9f33308238e437d9082544d78473a27e296d793f72d77f8b9d69b5c23
- MD5 ffad50fef827f24bcfe59a9323bb894f
- SHA1 5f5f8be414752ed81a028a9f363b0720498ed544
- SHA512 63d7131ccd1788b67db9dd4a3ae7ea1f7470a72b636241c9ae51e2fe719099ec07efe23773dbbb9e3fe92870c12fb263f1d9fd15ae06ffc40d37520c4d48ed4b
- SSDEEP 786432:6nJNoBpNAugxw7YySKRuFvIG+X2KT0txqE1VSrI8pQIS7dMlf7mB4JA+s61P3kq:6nI/Zrbo+AtxqyEIGQHdMlf7E4JA+s65
- TLSH T16AB72312ABD44079F2F79271697A6375467ABC702F32CACF62803A5E1B749D1D832723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association