General
- Target 2026-09-08_4254eb469905d73bde90cb0f26c397a0_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 8.1MB
- Sample260910-gw2d8a1zgw
- SHA256 586f684c5d4d0d8df13bdd8e21464778f0b233d7971a5dfa303cc3c70c782089
- MD5 4254eb469905d73bde90cb0f26c397a0
- SHA1 1bfedc2b6ffcc9ec6f88cb061c59454f92756651
- SHA512 78d19553a648ecc0631c6be820cbd46d93b73c9b6ae99bb044870e220d65720a7036aa546c5b85b943aa15663413083d77d21a48040c976988c0cff01ea2be0e
- SSDEEP 98304:kD2VSKuIIiPqnstLE9nU9k/i+JlzZTRJ19vLapIX:KWSK9qnh1U9IjJTcIX
- TLSH T1F786FBD027B3B13DCE1B94304B196A757560EEA06EA0CE77B1A0F7F85932854352EE27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-08_4254eb469905d73bde90cb0f26c397a0_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_4254eb469905d73bde90cb0f26c397a0_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_4254eb469905d73bde90cb0f26c397a0_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_njrat_smoke-loader_vidar_wannacry
- Size 8.1MB
- SHA256 586f684c5d4d0d8df13bdd8e21464778f0b233d7971a5dfa303cc3c70c782089
- MD5 4254eb469905d73bde90cb0f26c397a0
- SHA1 1bfedc2b6ffcc9ec6f88cb061c59454f92756651
- SHA512 78d19553a648ecc0631c6be820cbd46d93b73c9b6ae99bb044870e220d65720a7036aa546c5b85b943aa15663413083d77d21a48040c976988c0cff01ea2be0e
- SSDEEP 98304:kD2VSKuIIiPqnstLE9nU9k/i+JlzZTRJ19vLapIX:KWSK9qnh1U9IjJTcIX
- TLSH T1F786FBD027B3B13DCE1B94304B196A757560EEA06EA0CE77B1A0F7F85932854352EE27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory