General
- Target 2026-09-06_7da32e1355c3770eab277d4ffd898ebd_akira_amadey_cobalt-strike_darkgate_elex_glassworm_helldown_luca-stealer_njrat_remcos_vidar
- Size 17.5MB
- Sample260907-af42vaveqe
- SHA256 c33accff3d59f7251536fba02fdb1fbb153ef3fabc50886fd3d71659db963014
- MD5 7da32e1355c3770eab277d4ffd898ebd
- SHA1 9937db1cb7b6e14688f879ab29d52e8453f2efde
- SHA512 f63d4eefa94d3aaa4f0a370fee709e7a409aa6ebf6f22c0eb452d4a1ba213b38e674a199058f8aa713c274e0da3a68d1b357c0f16d398448aee6d5316c946aaa
- SSDEEP 393216:MOIU+vTx16o4DX/mNT3fTQW6OKEIrqNp/8xJGaEmz:MOV+vTx16prkvMOKEaxJGaEm
- TLSH T17107BE01FAC240B9C85B01B2646EF33F9B356EF44638C6A7DBF47E18ADB1770596A112
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-06_7da32e1355c3770eab277d4ffd898ebd_akira_amadey_cobalt-strike_darkgate_elex_glassworm_helld.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_7da32e1355c3770eab277d4ffd898ebd_akira_amadey_cobalt-strike_darkgate_elex_glassworm_helld.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_7da32e1355c3770eab277d4ffd898ebd_akira_amadey_cobalt-strike_darkgate_elex_glassworm_helldown_luca-stealer_njrat_remcos_vidar
- Size 17.5MB
- SHA256 c33accff3d59f7251536fba02fdb1fbb153ef3fabc50886fd3d71659db963014
- MD5 7da32e1355c3770eab277d4ffd898ebd
- SHA1 9937db1cb7b6e14688f879ab29d52e8453f2efde
- SHA512 f63d4eefa94d3aaa4f0a370fee709e7a409aa6ebf6f22c0eb452d4a1ba213b38e674a199058f8aa713c274e0da3a68d1b357c0f16d398448aee6d5316c946aaa
- SSDEEP 393216:MOIU+vTx16o4DX/mNT3fTQW6OKEIrqNp/8xJGaEmz:MOV+vTx16prkvMOKEaxJGaEm
- TLSH T17107BE01FAC240B9C85B01B2646EF33F9B356EF44638C6A7DBF47E18ADB1770596A112
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables using Telegram Chat Bot
-
UPX dump on OEP (original entry point)