General
- Target 2026-06-01_23a819753fae01c81c99bb21e65ff6d3_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 33.9MB
- Sample260601-sblc2shz2m
- SHA256 2f4448512c0b405294ebe110457ffd87e2151d394150f613a934396842342c37
- MD5 23a819753fae01c81c99bb21e65ff6d3
- SHA1 54449e7211c4c4e779a9e22d7fbd0da50fb4affc
- SHA512 8982167a7478ced33c91fc641e7462fb603c427dc749166f75c2e26905b06a1e95bd11a141b631783af2c35c3272e5c4ba91084b4e2c041581c049bb220ba3ba
- SSDEEP 196608:Ji8kL3Hxpai8kL3HxpcUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:FkL3RokL3RiUEtQevvqc2W1cpV2XI32i
- TLSH T15A775B91BAE443E2E3AA953485B182B2EB71BC0E1F31977F1179F21E1F376905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-01_23a819753fae01c81c99bb21e65ff6d3_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-01_23a819753fae01c81c99bb21e65ff6d3_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_23a819753fae01c81c99bb21e65ff6d3_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 33.9MB
- SHA256 2f4448512c0b405294ebe110457ffd87e2151d394150f613a934396842342c37
- MD5 23a819753fae01c81c99bb21e65ff6d3
- SHA1 54449e7211c4c4e779a9e22d7fbd0da50fb4affc
- SHA512 8982167a7478ced33c91fc641e7462fb603c427dc749166f75c2e26905b06a1e95bd11a141b631783af2c35c3272e5c4ba91084b4e2c041581c049bb220ba3ba
- SSDEEP 196608:Ji8kL3Hxpai8kL3HxpcUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:FkL3RokL3RiUEtQevvqc2W1cpV2XI32i
- TLSH T15A775B91BAE443E2E3AA953485B182B2EB71BC0E1F31977F1179F21E1F376905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry