General
- Target 2026-06-28_90426bec7d9c9611e3f171dc2d5c6e3a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 30.6MB
- Sample260628-zhmysaew3j
- SHA256 521a706810193493eed5e7fbce38c7d8134e16bcf12ff0c5237c08d536a60d71
- MD5 90426bec7d9c9611e3f171dc2d5c6e3a
- SHA1 676e4a78dbb6afc11345e0824caa8ead7ff4c9b6
- SHA512 da15717bedf2d0b67e0c386e4c54f86e1446aa568bac0fd713ef95ef0ee02a1f1041c33f0bd3f3838559a667257c02fe3e07d86d9c7a2180ba6af49d818e5fda
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+cw/c:Ho
- TLSH T181674951F5A08172D07A8471C696A77AFA337C411B608AC79386EB3C2F372D19A76733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-28_90426bec7d9c9611e3f171dc2d5c6e3a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_90426bec7d9c9611e3f171dc2d5c6e3a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_90426bec7d9c9611e3f171dc2d5c6e3a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 30.6MB
- SHA256 521a706810193493eed5e7fbce38c7d8134e16bcf12ff0c5237c08d536a60d71
- MD5 90426bec7d9c9611e3f171dc2d5c6e3a
- SHA1 676e4a78dbb6afc11345e0824caa8ead7ff4c9b6
- SHA512 da15717bedf2d0b67e0c386e4c54f86e1446aa568bac0fd713ef95ef0ee02a1f1041c33f0bd3f3838559a667257c02fe3e07d86d9c7a2180ba6af49d818e5fda
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+cw/c:Ho
- TLSH T181674951F5A08172D07A8471C696A77AFA337C411B608AC79386EB3C2F372D19A76733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry