General
- Target 2026-09-08_e8909fb112392e2888db6f8395348520_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar_wannacry
- Size 6.6MB
- Sample260910-cenpkstcrf
- SHA256 46f3488a52649c755d330c58651b041d5336d1a1d378c234e1382fdfe70e4d2c
- MD5 e8909fb112392e2888db6f8395348520
- SHA1 5e54e7562a823a17227d1a3c29f8cc4dd8105ef0
- SHA512 1171c7c18826a67dfa9d5c5215c16f1c706e3a6abbd3b7c4af054cec013a3bdf630ff38c2e9dfc31438666d1a9a2c9c2aee09d55de9e9cb269e7a0a1a693b179
- SSDEEP 98304:kD2VSKuIIiPqnstLE9nU9k/i+JlzZTRJ19m:KWSK9qnh1U9IjJS
- TLSH T12166A7D457B3F13DCE2B983017696AB67520DF902A108E77B1A0F7B89832915752EE33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-08_e8909fb112392e2888db6f8395348520_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar_wannacry.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_e8909fb112392e2888db6f8395348520_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_e8909fb112392e2888db6f8395348520_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_smoke-loader_vidar_wannacry
- Size 6.6MB
- SHA256 46f3488a52649c755d330c58651b041d5336d1a1d378c234e1382fdfe70e4d2c
- MD5 e8909fb112392e2888db6f8395348520
- SHA1 5e54e7562a823a17227d1a3c29f8cc4dd8105ef0
- SHA512 1171c7c18826a67dfa9d5c5215c16f1c706e3a6abbd3b7c4af054cec013a3bdf630ff38c2e9dfc31438666d1a9a2c9c2aee09d55de9e9cb269e7a0a1a693b179
- SSDEEP 98304:kD2VSKuIIiPqnstLE9nU9k/i+JlzZTRJ19m:KWSK9qnh1U9IjJS
- TLSH T12166A7D457B3F13DCE2B983017696AB67520DF902A108E77B1A0F7B89832915752EE33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory