General
- Target 2026-09-29_acb9db99d6f530eb541eee2d09054d97_akira_amadey_cobalt-strike_darkgate_glassworm_icedid_remcos_rusty-stealer_ryuk_satacom_smoke-loader
- Size 29.9MB
- Sample260929-w9n4dataqh
- SHA256 0746cf88059b6a5dfe640bf4ec415265a572ce59abb28eb3ca65b03ee35c409f
- MD5 acb9db99d6f530eb541eee2d09054d97
- SHA1 be37f37ec09e4b1755fd080006af11b48da013af
- SHA512 a31db4b5dc6077959853b3f9060e0ae50ead3d69f7f645e75e0cfddec3a63b50878daf3822bedf91ee7911269231140fbc6939f8d07f0a2e1d1a5495108cec58
- SSDEEP 393216:StIfMGgJiw3VwjkX1Uc1TP/9Fv4T3/aVqRqSKg3bL9AM4hi+:dkGgJ9VwjkX11f4b/aIQDohxR+
- TLSH T16C679D01B7E44471E2F72634252A6636557EBD301FA28BCBA765F6AE2C706C19F3031B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-29_acb9db99d6f530eb541eee2d09054d97_akira_amadey_cobalt-strike_darkgate_glassworm_icedid_rem.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_acb9db99d6f530eb541eee2d09054d97_akira_amadey_cobalt-strike_darkgate_glassworm_icedid_rem.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_acb9db99d6f530eb541eee2d09054d97_akira_amadey_cobalt-strike_darkgate_glassworm_icedid_remcos_rusty-stealer_ryuk_satacom_smoke-loader
- Size 29.9MB
- SHA256 0746cf88059b6a5dfe640bf4ec415265a572ce59abb28eb3ca65b03ee35c409f
- MD5 acb9db99d6f530eb541eee2d09054d97
- SHA1 be37f37ec09e4b1755fd080006af11b48da013af
- SHA512 a31db4b5dc6077959853b3f9060e0ae50ead3d69f7f645e75e0cfddec3a63b50878daf3822bedf91ee7911269231140fbc6939f8d07f0a2e1d1a5495108cec58
- SSDEEP 393216:StIfMGgJiw3VwjkX1Uc1TP/9Fv4T3/aVqRqSKg3bL9AM4hi+:dkGgJ9VwjkX11f4b/aIQDohxR+
- TLSH T16C679D01B7E44471E2F72634252A6636557EBD301FA28BCBA765F6AE2C706C19F3031B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of SetThreadContext