General
- Target 2026-06-27_df1e8ce88e43db131d735e69154628e9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_remcos_smoke-loader_stealc_vidar
- Size 37.7MB
- Sample260629-ckbl7sb16k
- SHA256 2b271db0d1eed80c55b333517efd75c1eadd5a6b73be947d4db18d974fe959bf
- MD5 df1e8ce88e43db131d735e69154628e9
- SHA1 801b368bcae7a1c546a186c9a0cfd70a3e07bb16
- SHA512 d8b2281a15337fa8190ff7cc4ccd7720d4fe43223a2a03292c3cc213f888e72ce2ca251e7d2a6dc325502ae65fe2259277fd6f833637d06a680b2cac8bc9751d
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+b9w/h1+Qw/h1+cw/h1+Qw/h1+bsUEtQeTbvf2zlt:CesUEtQevvqc2W1cpV2XI32i
- TLSH T169875A91F6E483E2D3669434C5B182B6FA727C0E1B3197BB4279F62E1F372905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_df1e8ce88e43db131d735e69154628e9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_df1e8ce88e43db131d735e69154628e9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_df1e8ce88e43db131d735e69154628e9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_remcos_smoke-loader_stealc_vidar
- Size 37.7MB
- SHA256 2b271db0d1eed80c55b333517efd75c1eadd5a6b73be947d4db18d974fe959bf
- MD5 df1e8ce88e43db131d735e69154628e9
- SHA1 801b368bcae7a1c546a186c9a0cfd70a3e07bb16
- SHA512 d8b2281a15337fa8190ff7cc4ccd7720d4fe43223a2a03292c3cc213f888e72ce2ca251e7d2a6dc325502ae65fe2259277fd6f833637d06a680b2cac8bc9751d
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+b9w/h1+Qw/h1+cw/h1+Qw/h1+bsUEtQeTbvf2zlt:CesUEtQevvqc2W1cpV2XI32i
- TLSH T169875A91F6E483E2D3669434C5B182B6FA727C0E1B3197BB4279F62E1F372905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application