General
- Target 2026-09-09_1861dc712cfa7304932dbb22ab22a0ec_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_hijackloader_icedid_luca-stealer_njrat_smoke-loader_stealc_vidar
- Size 64.0MB
- Sample260909-3rk3bstyft
- SHA256 543f3ee125edf0c13058aabd4696e42e8bfd266cba8b6585d9fc37c408eb489f
- MD5 1861dc712cfa7304932dbb22ab22a0ec
- SHA1 2b7051f39aa0fd3c47445b4065a649a07768a13f
- SHA512 c5d4de8908ffe88fd8da0b194a257ca35bc76d1358d94a0b8841fa568b5a99f0bcc87defde61fb09673576ed7ca175eeff1825aef8647112d020060e353e2358
- SSDEEP 786432:FvQHrK5/f4uU5vQHrK5/f4uU5vQHrK5/f4uU5vQHrK5/f4uUYEIvV:FvQHW2PvQHW2PvQHW2PvQHW2CV
- TLSH T163E7AE17B35681E6C02AE2B88A474327D7B9BC440330A7DB16D5B76A2F37BE4573A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-09-09_1861dc712cfa7304932dbb22ab22a0ec_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_1861dc712cfa7304932dbb22ab22a0ec_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_1861dc712cfa7304932dbb22ab22a0ec_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_hijackloader_icedid_luca-stealer_njrat_smoke-loader_stealc_vidar
- Size 64.0MB
- SHA256 543f3ee125edf0c13058aabd4696e42e8bfd266cba8b6585d9fc37c408eb489f
- MD5 1861dc712cfa7304932dbb22ab22a0ec
- SHA1 2b7051f39aa0fd3c47445b4065a649a07768a13f
- SHA512 c5d4de8908ffe88fd8da0b194a257ca35bc76d1358d94a0b8841fa568b5a99f0bcc87defde61fb09673576ed7ca175eeff1825aef8647112d020060e353e2358
- SSDEEP 786432:FvQHrK5/f4uU5vQHrK5/f4uU5vQHrK5/f4uU5vQHrK5/f4uUYEIvV:FvQHW2PvQHW2PvQHW2PvQHW2CV
- TLSH T163E7AE17B35681E6C02AE2B88A474327D7B9BC440330A7DB16D5B76A2F37BE4573A350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1