General
- Target 2026-06-28_7bb60eacb2cd02c9cd70d7d042bf34b5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.9MB
- Sample260628-1abq8aew2s
- SHA256 5a7c822001b86bfc5df614196dfc1de65a417cd8ab6d0c35ad6d78c70adab11b
- MD5 7bb60eacb2cd02c9cd70d7d042bf34b5
- SHA1 b055bc543e59fe4ac92f614d152b65a9be782e23
- SHA512 f625f5ccb02c5dfed1a7b7cc3bf6a51ccbe76587cfe937d925e230e7e6323e0f05ae679b2b0c69655991ac106d758d4ed5c389da621320fed01fd362e8f4efd6
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Qw/h1+cw/h1+Qw/h1+UoK:Ko
- TLSH T1D8F65A52F5A081B1D07A8471C696A77AFA337C411B608AC75386FB3C2F376D09A76723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_7bb60eacb2cd02c9cd70d7d042bf34b5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_7bb60eacb2cd02c9cd70d7d042bf34b5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_7bb60eacb2cd02c9cd70d7d042bf34b5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.9MB
- SHA256 5a7c822001b86bfc5df614196dfc1de65a417cd8ab6d0c35ad6d78c70adab11b
- MD5 7bb60eacb2cd02c9cd70d7d042bf34b5
- SHA1 b055bc543e59fe4ac92f614d152b65a9be782e23
- SHA512 f625f5ccb02c5dfed1a7b7cc3bf6a51ccbe76587cfe937d925e230e7e6323e0f05ae679b2b0c69655991ac106d758d4ed5c389da621320fed01fd362e8f4efd6
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Qw/h1+cw/h1+Qw/h1+UoK:Ko
- TLSH T1D8F65A52F5A081B1D07A8471C696A77AFA337C411B608AC75386FB3C2F376D09A76723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry