General
- Target 2026-06-02_64d90613a450152abb1984ec165d7b58_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 23.9MB
- Sample260602-dpckqsdy9k
- SHA256 4b8acd8f131f031f6735dee8b2c6ab26b3c0e2063b967424bd18e2755120df0b
- MD5 64d90613a450152abb1984ec165d7b58
- SHA1 8531556881707eab2b9f954db651cb3ea823de7f
- SHA512 64ca62395572f6b509668f8a8c25f5014c1fa1d4f00ebeb05e2f9df39dfb1f99baeea4d9b7e1ef14d29a9663e2abd42df9947f5aa5aaade8683cc067ace35c72
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCi8Vb618U68Vb618Ul8Vb618U68Vb61S:2cDcKcDcO3cDcKcDcO
- TLSH T16F477B17F69444F5D16E94348AA58232EA73BC120B719BCB43A4F62D2F336D05F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_64d90613a450152abb1984ec165d7b58_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_64d90613a450152abb1984ec165d7b58_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_64d90613a450152abb1984ec165d7b58_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 23.9MB
- SHA256 4b8acd8f131f031f6735dee8b2c6ab26b3c0e2063b967424bd18e2755120df0b
- MD5 64d90613a450152abb1984ec165d7b58
- SHA1 8531556881707eab2b9f954db651cb3ea823de7f
- SHA512 64ca62395572f6b509668f8a8c25f5014c1fa1d4f00ebeb05e2f9df39dfb1f99baeea4d9b7e1ef14d29a9663e2abd42df9947f5aa5aaade8683cc067ace35c72
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCi8Vb618U68Vb618Ul8Vb618U68Vb61S:2cDcKcDcO3cDcKcDcO
- TLSH T16F477B17F69444F5D16E94348AA58232EA73BC120B719BCB43A4F62D2F336D05F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry