2026-10-22_32c73a5e2d086bd41afdb7b54dc408de_amadey_cobalt-strike_darkgate_glassworm_hawkeye_icedid_njrat_remcos_satacom_vidar

General

Target
2026-10-22_32c73a5e2d086bd41afdb7b54dc408de_amadey_cobalt-strike_darkgate_glassworm_hawkeye_icedid_njrat_remcos_satacom_vidar
Size 2.3MB
Sample261024-vsggjafd44
SHA256 ccbad68cc5a61a0a7d853255912513cd88b0ebd370801ec967ec9213166fe8a0
MD5 32c73a5e2d086bd41afdb7b54dc408de
SHA1 58d7c1596b98c76c4112f878cda0ef721c347bec
SHA512 f87820560132aaa90e84bc8f712e1c6d1c006c35e9557f6c954ac5f2198c4dd427241d60781e94f18dbb0b4dd622bff1b82cfd638d27cff0531060168ea8d255
SSDEEP 49152:0u5HOTYv9MY35DMnCIjtAybydB3IO5ta1LHqJtb2I:nHP9E55tWCO5ta17
TLSH
T18EB54A11F66087B9D86B8075CBA1A625B5373C110BA0E2CB52D8F63D5F33AC1997B723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-22_32c73a5e2d086bd41afdb7b54dc408de_amadey_cobalt-strike_darkgate_glassworm_hawkeye_icedid_njrat_remcos_satacom_vidar

File Explorer

2026-10-22_32c73a5e2d086bd41afdb7b54dc408de_amadey_cobalt-strike_darkgate_glassworm_hawkeye_icedid_njrat_remcos_satacom_vidar

.exe 2.3MB

2026-10-22_32c73a5e2d086bd41afdb7b54dc408de_amadey_cobalt-strike_darkgate_glassworm_hawkeye_icedid_njrat_remcos_satacom_vidar

IMPHASH 94e5055bc710cabceaad4333a15eee0b
SHA256 ccbad68cc5a61a0a7d853255912513cd88b0ebd370801ec967ec9213166fe8a0
MD5 32c73a5e2d086bd41afdb7b54dc408de
SHA1 58d7c1596b98c76c4112f878cda0ef721c347bec
SHA512 f87820560132aaa90e84bc8f712e1c6d1c006c35e9557f6c954ac5f2198c4dd427241d60781e94f18dbb0b4dd622bff1b82cfd638d27cff0531060168ea8d255
SSDEEP 49152:0u5HOTYv9MY35DMnCIjtAybydB3IO5ta1LHqJtb2I:nHP9E55tWCO5ta17
TLSH
T18EB54A11F66087B9D86B8075CBA1A625B5373C110BA0E2CB52D8F63D5F33AC1997B723
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

40720

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\re\jdk7u45\229\build\windows-amd64\tmp\java\javaw\obj64\javaw.pdb

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA RegEnumKeyA

user32

MessageBoxA

comctl32

InitCommonControlsEx

kernel32

CreateFileW GetCommandLineA GetModuleFileNameA QueryPerformanceCounter QueryPerformanceFrequency LocalFree FormatMessageA GetLastError CloseHandle GetExitCodeProcess WaitForSingleObject CreateProcessA GetProcAddress GetModuleHandleA LoadLibraryA GetExitCodeThread FindFirstFileA FindNextFileA FindClose GetModuleHandleW ExitProcess DecodePointer GetStartupInfoW EnterCriticalSection LeaveCriticalSection HeapAlloc HeapReAlloc HeapFree FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA MultiByteToWideChar GetFileAttributesA ExitThread GetCurrentThreadId CreateThread InitializeCriticalSectionAndSpinCount DeleteCriticalSection EncodePointer LoadLibraryW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext TerminateProcess GetCurrentProcess FlsGetValue FlsSetValue FlsFree SetLastError FlsAlloc RtlUnwindEx WriteFile GetStdHandle GetModuleFileNameW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType HeapSetInformation GetVersion HeapCreate GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle GetConsoleCP GetConsoleMode GetFullPathNameA GetFileInformationByHandle PeekNamedPipe CreateFileA GetCurrentDirectoryW FlushFileBuffers SetEnvironmentVariableW SetEnvironmentVariableA GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize CompareStringW SetFilePointer ReadFile WriteConsoleW GetDriveTypeW SetEndOfFile GetProcessHeap GetTimeZoneInformation LCMapStringW GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_32c73a5e2d086bd41afdb7b54dc408de_amadey_cobalt-strike_darkgate_glassworm_hawkeye_icedid_njrat_remcos_satacom_vidar

advapi32

user32

comctl32

kernel32

generic