General
- Target 2026-09-13_fad0c811e6227ac7def5fc80d408a901_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.1MB
- Sample260913-j2tyfaha47
- SHA256 21b7924a855ecb4abddf66b3cdecb4d15e355fd9585a27a3be5017a4f9adfdbf
- MD5 fad0c811e6227ac7def5fc80d408a901
- SHA1 9b6745cd9b033f6fd0955414be810e9a43037d42
- SHA512 724ed35e445ea9a86110e0f8ae4446fabce4e40a5300a2776580b75bbca6f5bc37e040ae88279cf4f21ed411d4bc381d6073f06e11af154d13f174d42f6e9c46
- SSDEEP 49152:5+U8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpuD:5+UgTH2M2m9UMpu1QfLczqssnKSG
- TLSH T1E156C51125DA9FDCC05FA474CE0669A16A237C868F61AFDF19807E293E756F06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-13_fad0c811e6227ac7def5fc80d408a901_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-13_fad0c811e6227ac7def5fc80d408a901_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijac.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-13_fad0c811e6227ac7def5fc80d408a901_akira_amadey_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 6.1MB
- SHA256 21b7924a855ecb4abddf66b3cdecb4d15e355fd9585a27a3be5017a4f9adfdbf
- MD5 fad0c811e6227ac7def5fc80d408a901
- SHA1 9b6745cd9b033f6fd0955414be810e9a43037d42
- SHA512 724ed35e445ea9a86110e0f8ae4446fabce4e40a5300a2776580b75bbca6f5bc37e040ae88279cf4f21ed411d4bc381d6073f06e11af154d13f174d42f6e9c46
- SSDEEP 49152:5+U8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpuD:5+UgTH2M2m9UMpu1QfLczqssnKSG
- TLSH T1E156C51125DA9FDCC05FA474CE0669A16A237C868F61AFDF19807E293E756F06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application