General
- Target 2026-10-08_623000a5199d2a059e150348c6b0fdaf_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_remcos_vidar
- Size 7.5MB
- Sample261009-ql9saagy81
- SHA256 5f342ea3d25bdb474880102f6ca4c7d6f88f443c1d24b0b122264691d59b1d49
- MD5 623000a5199d2a059e150348c6b0fdaf
- SHA1 965de0a2121a1f1d7d8142f8b2b307ff36c5b546
- SHA512 43fa3e210f3bd5c205d75da06bb476be3f530debd18f853729c9a9fb6c8addf9293a1bbe0496568c93eae19c5e028e67d09a057b26f597cecb69be93314a1033
- SSDEEP 98304:BMM/hZs92UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtGh1hN5DTt:Bz/hZs92S9+ULdNPtbuPZOOmnqogHh/p
- TLSH T1BD86D02EFBA08036C57651728455D222C625FD68A3298FC76745771CBB3A3C37E3A272
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-08_623000a5199d2a059e150348c6b0fdaf_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_623000a5199d2a059e150348c6b0fdaf_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_.exe
Resource
win11ltsc2024-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_623000a5199d2a059e150348c6b0fdaf_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_remcos_vidar
- Size 7.5MB
- SHA256 5f342ea3d25bdb474880102f6ca4c7d6f88f443c1d24b0b122264691d59b1d49
- MD5 623000a5199d2a059e150348c6b0fdaf
- SHA1 965de0a2121a1f1d7d8142f8b2b307ff36c5b546
- SHA512 43fa3e210f3bd5c205d75da06bb476be3f530debd18f853729c9a9fb6c8addf9293a1bbe0496568c93eae19c5e028e67d09a057b26f597cecb69be93314a1033
- SSDEEP 98304:BMM/hZs92UgXq9ouFkULGyqobNq1Mft5rG6uPO276HoVNmnolMsFiHtGh1hN5DTt:Bz/hZs92S9+ULdNPtbuPZOOmnqogHh/p
- TLSH T1BD86D02EFBA08036C57651728455D222C625FD68A3298FC76745771CBB3A3C37E3A272
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory