General
- Target 2026-08-19_b51434ce39491cb94eea49d4388b4ee4_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_smoke-loader_vidar_wannacry
- Size 3.6MB
- Sample260819-wfrx6seq9x
- SHA256 664d7731bec7d1e9b874bb42155f10a811858e4338a6d65ff07c52de35cf3202
- MD5 b51434ce39491cb94eea49d4388b4ee4
- SHA1 e9029e57e529b576a3c8d3c02d64d456e851b39e
- SHA512 d9c27c1d18ee69f4bcba6ed4f88965aa04d39e3d803033abe724a39763b8dcd39bd60ad66af37930fa0e466cc0987a56b4ace08937e46d953b529e3b5077a15e
- SSDEEP 98304:vjBxcO4EYj/PYXq9ou82UgXq9ouFkULGyqobNq1Q:vjBxcO4TH9k2S9+ULdNB
- TLSH T140069E23F7E18076E92312B2586DAB7996B7F4200725CBD75381CA19FF606C39E37252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2026-08-19_b51434ce39491cb94eea49d4388b4ee4_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_b51434ce39491cb94eea49d4388b4ee4_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloade.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_b51434ce39491cb94eea49d4388b4ee4_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_smoke-loader_vidar_wannacry
- Size 3.6MB
- SHA256 664d7731bec7d1e9b874bb42155f10a811858e4338a6d65ff07c52de35cf3202
- MD5 b51434ce39491cb94eea49d4388b4ee4
- SHA1 e9029e57e529b576a3c8d3c02d64d456e851b39e
- SHA512 d9c27c1d18ee69f4bcba6ed4f88965aa04d39e3d803033abe724a39763b8dcd39bd60ad66af37930fa0e466cc0987a56b4ace08937e46d953b529e3b5077a15e
- SSDEEP 98304:vjBxcO4EYj/PYXq9ou82UgXq9ouFkULGyqobNq1Q:vjBxcO4TH9k2S9+ULdNB
- TLSH T140069E23F7E18076E92312B2586DAB7996B7F4200725CBD75381CA19FF606C39E37252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory