General
- Target 2026-08-24_791e40ae32d1242f16f48f4f1db019eb_cobalt-strike_darkgate_hijackloader_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 3.0MB
- Sample260825-lzgansgp6y
- SHA256 1dd5a2a2f3c7c4d1e4255ffd76554517b3c996779f27ef25682f3b185e986e61
- MD5 791e40ae32d1242f16f48f4f1db019eb
- SHA1 b40d7348b2e354a992924d89fff997abc15efc14
- SHA512 5f758b22cc2fdf19c3d7079b1a1833eb3491c5390d33164cd128443c1f4664437f3cb5e71a01643f887cec6efa66dacf42f8709261b8e464bdae94dc72f2e07a
- SSDEEP 49152:blMf/lLo51rBmmWOZO9SEmBCp2BDseKECCJPpDrbqcjo/xcawYl0UMRlZ:W/h4tZNh7XExcawr
- TLSH T15EE59FA07658C866E512247E65753A84402CF8E6D7B108CFBFC43DA47636AD3ED3A327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-24_791e40ae32d1242f16f48f4f1db019eb_cobalt-strike_darkgate_hijackloader_icedid_luca-stealer_.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_791e40ae32d1242f16f48f4f1db019eb_cobalt-strike_darkgate_hijackloader_icedid_luca-stealer_.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_791e40ae32d1242f16f48f4f1db019eb_cobalt-strike_darkgate_hijackloader_icedid_luca-stealer_njrat_remcos_ryuk_satacom_stealc_vidar_xworm
- Size 3.0MB
- SHA256 1dd5a2a2f3c7c4d1e4255ffd76554517b3c996779f27ef25682f3b185e986e61
- MD5 791e40ae32d1242f16f48f4f1db019eb
- SHA1 b40d7348b2e354a992924d89fff997abc15efc14
- SHA512 5f758b22cc2fdf19c3d7079b1a1833eb3491c5390d33164cd128443c1f4664437f3cb5e71a01643f887cec6efa66dacf42f8709261b8e464bdae94dc72f2e07a
- SSDEEP 49152:blMf/lLo51rBmmWOZO9SEmBCp2BDseKECCJPpDrbqcjo/xcawYl0UMRlZ:W/h4tZNh7XExcawr
- TLSH T15EE59FA07658C866E512247E65753A84402CF8E6D7B108CFBFC43DA47636AD3ED3A327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Executes dropped EXE
-
Modifies system executable filetype association