General
- Target 2026-09-12_ecc7d32314aba47658ca4bef898e524d_akira_amadey_cobalt-strike_darkgate_elex_hawkeye_hijackloader_icedid_ipamor_luca-stealer_njrat_remcos_rhadamanthys_stealc_vidar_wannacry
- Size 10.5MB
- Sample260912-sp2xysdg34
- SHA256 df461794990aa6bd768e1024f0a5adbb5e6156a1e32e7ef1a840992a87ac1921
- MD5 ecc7d32314aba47658ca4bef898e524d
- SHA1 6b51e42dd10cc8bf96f1d57a6cb5645b753576f2
- SHA512 3bd28a811d34ce613a992fb6612ce39ee9aabb560c8cd13f8c1aa8e4739fa4c3ee68d38aafb8155c0dec78386537b35afc47cf107d1a67a797313134fb45d356
- SSDEEP 196608:vgTH2qBpu1QfLIqsufAAPI5gbui+LjEN4:oTHNBpu1Qfc0a50cLjEN4
- TLSH T19DB63A1172E98FA9D06FE434CE5665A56A337C418F209FDF19407E293E726A09E3831F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-12_ecc7d32314aba47658ca4bef898e524d_akira_amadey_cobalt-strike_darkgate_elex_hawkeye_hijackl.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_ecc7d32314aba47658ca4bef898e524d_akira_amadey_cobalt-strike_darkgate_elex_hawkeye_hijackl.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_ecc7d32314aba47658ca4bef898e524d_akira_amadey_cobalt-strike_darkgate_elex_hawkeye_hijackloader_icedid_ipamor_luca-stealer_njrat_remcos_rhadamanthys_stealc_vidar_wannacry
- Size 10.5MB
- SHA256 df461794990aa6bd768e1024f0a5adbb5e6156a1e32e7ef1a840992a87ac1921
- MD5 ecc7d32314aba47658ca4bef898e524d
- SHA1 6b51e42dd10cc8bf96f1d57a6cb5645b753576f2
- SHA512 3bd28a811d34ce613a992fb6612ce39ee9aabb560c8cd13f8c1aa8e4739fa4c3ee68d38aafb8155c0dec78386537b35afc47cf107d1a67a797313134fb45d356
- SSDEEP 196608:vgTH2qBpu1QfLIqsufAAPI5gbui+LjEN4:oTHNBpu1Qfc0a50cLjEN4
- TLSH T19DB63A1172E98FA9D06FE434CE5665A56A337C418F209FDF19407E293E726A09E3831F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application