General
- Target 2026-05-22_140079ccf5706af58c7c8751bcac1a32_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 14.1MB
- Sample260522-2raqxsfx3n
- SHA256 9d67efd9d21c68ae3a32c94c99f54a4821869e507c45bb925c5f2e5dc4893eac
- MD5 140079ccf5706af58c7c8751bcac1a32
- SHA1 e104cc3cd9f5c48417778e274cc0e7972685959e
- SHA512 1ae408b3f4aaa95d933ef7107e1726935e457f42a0e203538be0c53fccc8230db6cf8c019a7cdac42996755f94c59dd14dac5c1aaf5441e59f34f0761ce1a808
- SSDEEP 196608:l8Vb618U68Vb618U7/h1+TO8Vb618U68Vb618U7/h1+THi/h1+:2cDcQcDcm
- TLSH T11CE68C16F6A481F5D07AC47486A69636EA327C520B319BCB4394F71D2F336D09F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_140079ccf5706af58c7c8751bcac1a32_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_140079ccf5706af58c7c8751bcac1a32_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_140079ccf5706af58c7c8751bcac1a32_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 14.1MB
- SHA256 9d67efd9d21c68ae3a32c94c99f54a4821869e507c45bb925c5f2e5dc4893eac
- MD5 140079ccf5706af58c7c8751bcac1a32
- SHA1 e104cc3cd9f5c48417778e274cc0e7972685959e
- SHA512 1ae408b3f4aaa95d933ef7107e1726935e457f42a0e203538be0c53fccc8230db6cf8c019a7cdac42996755f94c59dd14dac5c1aaf5441e59f34f0761ce1a808
- SSDEEP 196608:l8Vb618U68Vb618U7/h1+TO8Vb618U68Vb618U7/h1+THi/h1+:2cDcQcDcm
- TLSH T11CE68C16F6A481F5D07AC47486A69636EA327C520B319BCB4394F71D2F336D09F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry