General
- Target 2026-08-23_a8efd4780ead26d849cc411ae88fde85_amadey_cobalt-strike_darkgate_elex_hellokitty_manuscrypt_remcos_smoke-loader
- Size 165KB
- Sample260824-cn3vvsscnf
- SHA256 bb7d8070a32f64b8656a50a0632bd8b58588a82edf61daefabb0dfcb3a1ae43e
- MD5 a8efd4780ead26d849cc411ae88fde85
- SHA1 cda02667e92543e40ddf95b73f07b99740d504fc
- SHA512 aa30c7f355495487137203505b2315b108ebb77630496ee2be7df0aba1526d9d26792181ec8cff5b10088c37680c02f67427537a5af814f034d4c93005c07da4
- SSDEEP 3072:5NV+7SXjtEjDg/s6L7h/gT72ZywWWq/ePa8/uw7cFh:5TwSXNUQmkWWxzcF
- TLSH T165F3A3103EE74675F3B3CE7418B4D761483EBDA19E23979F92901B5A0922DE0DDB4E22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-23_a8efd4780ead26d849cc411ae88fde85_amadey_cobalt-strike_darkgate_elex_hellokitty_manuscrypt_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_a8efd4780ead26d849cc411ae88fde85_amadey_cobalt-strike_darkgate_elex_hellokitty_manuscrypt_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_a8efd4780ead26d849cc411ae88fde85_amadey_cobalt-strike_darkgate_elex_hellokitty_manuscrypt_remcos_smoke-loader
- Size 165KB
- SHA256 bb7d8070a32f64b8656a50a0632bd8b58588a82edf61daefabb0dfcb3a1ae43e
- MD5 a8efd4780ead26d849cc411ae88fde85
- SHA1 cda02667e92543e40ddf95b73f07b99740d504fc
- SHA512 aa30c7f355495487137203505b2315b108ebb77630496ee2be7df0aba1526d9d26792181ec8cff5b10088c37680c02f67427537a5af814f034d4c93005c07da4
- SSDEEP 3072:5NV+7SXjtEjDg/s6L7h/gT72ZywWWq/ePa8/uw7cFh:5TwSXNUQmkWWxzcF
- TLSH T165F3A3103EE74675F3B3CE7418B4D761483EBDA19E23979F92901B5A0922DE0DDB4E22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing many references to VEEAM. Observed in ransomware
-
Detects executables referencing many IR and analysis tools