General
- Target 2026-06-04_6eb5776241e8bb2bee48a7d463d691fa_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 50.2MB
- Sample260604-yb29fsds2t
- SHA256 893b7ddc9cefc61c41e7340d789e15a5bf5cb16d842609429dd9664f11a2a742
- MD5 6eb5776241e8bb2bee48a7d463d691fa
- SHA1 581eb826997be06dfccb49b05a808c8410f73669
- SHA512 41b11f5715354c92f65cd609bc04294dff41535c7f46385d4bb4658c01775819c05dd81cf247e890e0128925c9414fcfd4c78618e5c6add86eda1ba34689a0a4
- SSDEEP 393216:2cDc3KR0oyGtcDc3KR0oyGUcDc3KR0oyGtcDc3KR0oyGnw8:tAaR9RGAaR9RPAaR9RGAaR9Rw8
- TLSH T1BAB77C26B6E540E5D0AAC534CF568232E7B27C254FB097DB9250B2891F33AD07F3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_6eb5776241e8bb2bee48a7d463d691fa_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_6eb5776241e8bb2bee48a7d463d691fa_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_6eb5776241e8bb2bee48a7d463d691fa_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 50.2MB
- SHA256 893b7ddc9cefc61c41e7340d789e15a5bf5cb16d842609429dd9664f11a2a742
- MD5 6eb5776241e8bb2bee48a7d463d691fa
- SHA1 581eb826997be06dfccb49b05a808c8410f73669
- SHA512 41b11f5715354c92f65cd609bc04294dff41535c7f46385d4bb4658c01775819c05dd81cf247e890e0128925c9414fcfd4c78618e5c6add86eda1ba34689a0a4
- SSDEEP 393216:2cDc3KR0oyGtcDc3KR0oyGUcDc3KR0oyGtcDc3KR0oyGnw8:tAaR9RGAaR9RPAaR9RGAaR9Rw8
- TLSH T1BAB77C26B6E540E5D0AAC534CF568232E7B27C254FB097DB9250B2891F33AD07F3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry