General
- Target 2026-09-30_fbcaf4baff6345aaf3c40a19a30db8f6_amadey_cobalt-strike_darkgate_elex_gcleaner_glassworm_hawkeye_smoke-loader_vidar
- Size 2.0MB
- Sample260930-g8resavbqb
- SHA256 8c072fe7af89c519cd2f1563bfda62de31769f76c42afccef457704624cf64f3
- MD5 fbcaf4baff6345aaf3c40a19a30db8f6
- SHA1 14c6c9363fc070bfb501c1330ce3c0ec91d8e93b
- SHA512 be6c8d98f203302bfc950da304a16717449a03ac212733a633f92558951748eaec6c0d3bbfa14e2fbf36815f4214838c558a7c3951606c461d67e03b870b897f
- SSDEEP 49152:ct8Q4HT8+Cq99LyHHI+t6O8N+ailEy5ljQ:ct8PR0oAa5
- TLSH T185A5AD13F6A180B9E06AC479875A9336E836B8550F2075DF63E0AB592F33BD0673D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_fbcaf4baff6345aaf3c40a19a30db8f6_amadey_cobalt-strike_darkgate_elex_gcleaner_glassworm_hawkeye_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_fbcaf4baff6345aaf3c40a19a30db8f6_amadey_cobalt-strike_darkgate_elex_gcleaner_glassworm_hawkeye_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_fbcaf4baff6345aaf3c40a19a30db8f6_amadey_cobalt-strike_darkgate_elex_gcleaner_glassworm_hawkeye_smoke-loader_vidar
- Size 2.0MB
- SHA256 8c072fe7af89c519cd2f1563bfda62de31769f76c42afccef457704624cf64f3
- MD5 fbcaf4baff6345aaf3c40a19a30db8f6
- SHA1 14c6c9363fc070bfb501c1330ce3c0ec91d8e93b
- SHA512 be6c8d98f203302bfc950da304a16717449a03ac212733a633f92558951748eaec6c0d3bbfa14e2fbf36815f4214838c558a7c3951606c461d67e03b870b897f
- SSDEEP 49152:ct8Q4HT8+Cq99LyHHI+t6O8N+ailEy5ljQ:ct8PR0oAa5
- TLSH T185A5AD13F6A180B9E06AC479875A9336E836B8550F2075DF63E0AB592F33BD0673D712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.