General
- Target 2026-10-19_63ee56c0cde4ac098a4991820c415da9_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_wannacry
- Size 9.1MB
- Sample261020-w42saagx9p
- SHA256 452ea1ca21bf3c8cabe77df78e173f4358bc87332d1fc7568c9f37d0ba22a99b
- MD5 63ee56c0cde4ac098a4991820c415da9
- SHA1 501c628778957678588a4395444800fe67b6c95f
- SHA512 322d9ee23f97e42df2128bd47b80eb7e84c08a896622ed76c91617f01d1f401c2d0299c9f9de91c13099357e7eff4dbb67e333f0b1d9183dbabdfb3d6b6560d3
- SSDEEP 196608:NoMl8D1jv1A/koMl8D1jMf2S9+ULdNPtbuPZOOmnqogHh/G:k2Y2SlLdNPt6ROOmqZA
- TLSH T133A6BE2EE745C076C5260172C859A2F6D66DFC20D3258BC77388FF19BB716C36A36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-19_63ee56c0cde4ac098a4991820c415da9_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-19_63ee56c0cde4ac098a4991820c415da9_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-19_63ee56c0cde4ac098a4991820c415da9_amadey_cobalt-strike_darkgate_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_smoke-loader_wannacry
- Size 9.1MB
- SHA256 452ea1ca21bf3c8cabe77df78e173f4358bc87332d1fc7568c9f37d0ba22a99b
- MD5 63ee56c0cde4ac098a4991820c415da9
- SHA1 501c628778957678588a4395444800fe67b6c95f
- SHA512 322d9ee23f97e42df2128bd47b80eb7e84c08a896622ed76c91617f01d1f401c2d0299c9f9de91c13099357e7eff4dbb67e333f0b1d9183dbabdfb3d6b6560d3
- SSDEEP 196608:NoMl8D1jv1A/koMl8D1jMf2S9+ULdNPtbuPZOOmnqogHh/G:k2Y2SlLdNPt6ROOmqZA
- TLSH T133A6BE2EE745C076C5260172C859A2F6D66DFC20D3258BC77388FF19BB716C36A36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory