2026-10-22_b792614c7a3fae2ff23ada85c98075ae_amadey_cloudeye_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_b792614c7a3fae2ff23ada85c98075ae_amadey_cloudeye_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar
Size 3.6MB
Sample261023-3cvm8aev8z
SHA256 ff04422e8ee50a7d76e2714fca17abb02e04c3dc61d1dfa087c9505c737064dd
MD5 b792614c7a3fae2ff23ada85c98075ae
SHA1 3a28f90de98aa23551d1aed338dbfe6621744e84
SHA512 55ce2321c545ae1738d3737254665fc93281bb9500cf2b2b6e373f476a9fd4381a6f31874c2a3f01c982aed474cdeccf3d8eea09bca732cbbda7dbe8cdf6d93c
SSDEEP 98304:m+RYNAKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzl87aW7tPWR:PmAE9695ta1o/o
TLSH
T16E064902B6A48A72D0779575C8A7A75AEB727C411F3087CF1340BB6C6E337D1A936722
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_b792614c7a3fae2ff23ada85c98075ae_amadey_cloudeye_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar

File Explorer

2026-10-22_b792614c7a3fae2ff23ada85c98075ae_amadey_cloudeye_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar

.exe 3.6MB

2026-10-22_b792614c7a3fae2ff23ada85c98075ae_amadey_cloudeye_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar

IMPHASH 7ed0d71376e55d58ab36dc7d3ffda898
SHA256 ff04422e8ee50a7d76e2714fca17abb02e04c3dc61d1dfa087c9505c737064dd
MD5 b792614c7a3fae2ff23ada85c98075ae
SHA1 3a28f90de98aa23551d1aed338dbfe6621744e84
SHA512 55ce2321c545ae1738d3737254665fc93281bb9500cf2b2b6e373f476a9fd4381a6f31874c2a3f01c982aed474cdeccf3d8eea09bca732cbbda7dbe8cdf6d93c
SSDEEP 98304:m+RYNAKvkTgXuquveY+W2o8oT3ezMrl9cekcHhXh9HJUiWUXsmqsqzl87aW7tPWR:PmAE9695ta1o/o
TLSH
T16E064902B6A48A72D0779575C8A7A75AEB727C411F3087CF1340BB6C6E337D1A936722
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathW SetFileTime CloseHandle GetShortPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError GetFullPathNameW CreateDirectoryW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW SetFileAttributesW ExpandEnvironmentStringsW LoadLibraryW lstrlenW lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW lstrcpyA lstrcpyW lstrcatW GetSystemDirectoryW GetVersion GetProcAddress LoadLibraryA GetModuleHandleA GetModuleHandleW lstrcmpiW lstrcmpW WaitForSingleObject GlobalFree GlobalAlloc LoadLibraryExW GetExitCodeProcess FreeLibrary WritePrivateProfileStringW SetErrorMode GetCommandLineW GetPrivateProfileStringW FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar WriteFile lstrlenA WideCharToMultiByte

user32

EndDialog ScreenToClient GetWindowRect RegisterClassW EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData wsprintfW CreateWindowExW SystemParametersInfoW AppendMenuW CreatePopupMenu GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage GetDC SetWindowLongW LoadImageW SendMessageTimeoutW FindWindowExW EmptyClipboard OpenClipboard TrackPopupMenu EndPaint ShowWindow GetDlgItem IsWindow SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegCloseKey RegOpenKeyExW RegDeleteKeyW RegDeleteValueW RegEnumValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_b792614c7a3fae2ff23ada85c98075ae_amadey_cloudeye_cobalt-strike_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic