General
- Target 2026-06-04_320fb3e8925afff1eb6fe769259f5da5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 28.4MB
- Sample260604-ysj47sd16k
- SHA256 3343e6927c4861f20462eb4290686d04a3a7a2ef043c603bc40dedd6821e3dde
- MD5 320fb3e8925afff1eb6fe769259f5da5
- SHA1 2625873e52f6c4741ce559907fe9b31469e510d5
- SHA512 9aa62fe7a25c1f9a6916544dcc6b433dc678e7075c451fef80788881c0d1bf47346d3e563bdf4fe6253dd25590396f9c315055ea321c92455e9678e7ed89ac6b
- SSDEEP 393216:2cDc3KR0oyG5WqQjp1c3KR0oyG5WqQjp3:tAaR9RsfjpOaR9Rsfjp3
- TLSH T1DD676B13B2E540E8D0AAC174CB568332E6B27C654FB0A7DF5250B2992F73AD07B39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_320fb3e8925afff1eb6fe769259f5da5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_320fb3e8925afff1eb6fe769259f5da5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_320fb3e8925afff1eb6fe769259f5da5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 28.4MB
- SHA256 3343e6927c4861f20462eb4290686d04a3a7a2ef043c603bc40dedd6821e3dde
- MD5 320fb3e8925afff1eb6fe769259f5da5
- SHA1 2625873e52f6c4741ce559907fe9b31469e510d5
- SHA512 9aa62fe7a25c1f9a6916544dcc6b433dc678e7075c451fef80788881c0d1bf47346d3e563bdf4fe6253dd25590396f9c315055ea321c92455e9678e7ed89ac6b
- SSDEEP 393216:2cDc3KR0oyG5WqQjp1c3KR0oyG5WqQjp3:tAaR9RsfjpOaR9Rsfjp3
- TLSH T1DD676B13B2E540E8D0AAC174CB568332E6B27C654FB0A7DF5250B2992F73AD07B39716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry