General
- Target 2026-06-28_5f3ecf6a61b38f369f189dd4838e966d_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar_wannacry
- Size 29.5MB
- Sample260628-162mhsfs61
- SHA256 6753e2b2e0b990641852e047d523f53e0c583f305b40db22a3e98edd48a30bad
- MD5 5f3ecf6a61b38f369f189dd4838e966d
- SHA1 4d9bc14d26704ce40c349b73771ac6c7dd43f42f
- SHA512 5c95bb9d2a55ae8b922bc7996dbecd0875e81f07e9398f1848524d23111bc4132980f110f7aedd52d679e7e925cf4677e60d661dd62273bb683c697efddde63e
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+cw/1:
- TLSH T196674A91F5A08172D07A8471C696A77AFA3378411B708BC79386DB3C2F272D19A76733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_5f3ecf6a61b38f369f189dd4838e966d_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_5f3ecf6a61b38f369f189dd4838e966d_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_5f3ecf6a61b38f369f189dd4838e966d_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar_wannacry
- Size 29.5MB
- SHA256 6753e2b2e0b990641852e047d523f53e0c583f305b40db22a3e98edd48a30bad
- MD5 5f3ecf6a61b38f369f189dd4838e966d
- SHA1 4d9bc14d26704ce40c349b73771ac6c7dd43f42f
- SHA512 5c95bb9d2a55ae8b922bc7996dbecd0875e81f07e9398f1848524d23111bc4132980f110f7aedd52d679e7e925cf4677e60d661dd62273bb683c697efddde63e
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+cw/1:
- TLSH T196674A91F5A08172D07A8471C696A77AFA3378411B708BC79386DB3C2F272D19A76733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry