General
- Target 2026-11-01_c357d03b667959d45855afd6811c8d6c_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_smoke-loader_stealc_vidar
- Size 4.8MB
- Sample261102-lflfaaef69
- SHA256 55a9ad58b5aa247d34efc0962c1d4b7bb44a430517294420fa595b72ae191759
- MD5 c357d03b667959d45855afd6811c8d6c
- SHA1 b552b13b8b99043b3d3950ddb814358fb09327b4
- SHA512 90c9c92fc1d3ae5ea620d89a7f77670a825f8c5b0ae7273183d43c6827f6acae4d2dbd2c843ea84c2bbffa544364ebba247cec9b89847faca7cbab3c01f8309e
- SSDEEP 98304:BJ7A82UgXMQzO2xDBkQRrIV9ipZW93EFs8OEU2UgXq9p:BJ7A82UqOoFkQRUVcpa3l3EU2S9p
- TLSH T1A836F113A7F04036E56361B2E56EBB3AE97AF500033099DB87D28D663F126D35637362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-01_c357d03b667959d45855afd6811c8d6c_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_c357d03b667959d45855afd6811c8d6c_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hij.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_c357d03b667959d45855afd6811c8d6c_amadey_cobalt-strike_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_smoke-loader_stealc_vidar
- Size 4.8MB
- SHA256 55a9ad58b5aa247d34efc0962c1d4b7bb44a430517294420fa595b72ae191759
- MD5 c357d03b667959d45855afd6811c8d6c
- SHA1 b552b13b8b99043b3d3950ddb814358fb09327b4
- SHA512 90c9c92fc1d3ae5ea620d89a7f77670a825f8c5b0ae7273183d43c6827f6acae4d2dbd2c843ea84c2bbffa544364ebba247cec9b89847faca7cbab3c01f8309e
- SSDEEP 98304:BJ7A82UgXMQzO2xDBkQRrIV9ipZW93EFs8OEU2UgXq9p:BJ7A82UqOoFkQRUVcpa3l3EU2S9p
- TLSH T1A836F113A7F04036E56361B2E56EBB3AE97AF500033099DB87D28D663F126D35637362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory