General
- Target 2026-06-02_2c7643fcb06605b48e118242dc6986b0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 58.1MB
- Sample260602-tv2d2sat4w
- SHA256 939469800f02cbb8e1d67329cdf13ea7dfe254852bccd6906f51b2349925c014
- MD5 2c7643fcb06605b48e118242dc6986b0
- SHA1 7566e50b4090ad55823bdaad80385a59e023f451
- SHA512 0d50dc4f41b28ac1841c9b9c89a23e410447895cea7c0f67d99a688a68d1b75c18f4c7de8963a38feca4f6ec3176b8155b3a847e188fd778b9f4859ee3981046
- SSDEEP 393216:2cDc6cDcSvyEYKb7cDc6cDcSvyEYKbKcDc6cDcSvyEYKb7cDc6cDcSvyEYKb0D:tAZA2aAZA2bAZA2aAZA2w
- TLSH T1A5D78E16BBE440F5E17AD5348A668672E772BC120B319BCF4390E61E2F336D05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-02_2c7643fcb06605b48e118242dc6986b0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_2c7643fcb06605b48e118242dc6986b0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_2c7643fcb06605b48e118242dc6986b0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 58.1MB
- SHA256 939469800f02cbb8e1d67329cdf13ea7dfe254852bccd6906f51b2349925c014
- MD5 2c7643fcb06605b48e118242dc6986b0
- SHA1 7566e50b4090ad55823bdaad80385a59e023f451
- SHA512 0d50dc4f41b28ac1841c9b9c89a23e410447895cea7c0f67d99a688a68d1b75c18f4c7de8963a38feca4f6ec3176b8155b3a847e188fd778b9f4859ee3981046
- SSDEEP 393216:2cDc6cDcSvyEYKb7cDc6cDcSvyEYKbKcDc6cDcSvyEYKb7cDc6cDcSvyEYKb0D:tAZA2aAZA2bAZA2aAZA2w
- TLSH T1A5D78E16BBE440F5E17AD5348A668672E772BC120B319BCF4390E61E2F336D05E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry