General
- Target 2026-06-27_b84b3c6c935a8d5f6bcc4cde971810af_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_remcos_smoke-loader_vidar
- Size 14.9MB
- Sample260629-d4k6escs8s
- SHA256 dcfbb24895f0a15125acfaae4859b303d8a77c542ee14881ac86ff3d419ef9e3
- MD5 b84b3c6c935a8d5f6bcc4cde971810af
- SHA1 8d6865f6ddf505da7b2954f1d77a94e446610371
- SHA512 7cb130f66a7d107809ff485693c2025bdb5dea942b3341f3c2113bf00404cdf8061b66e731dcf039c7953495eecb337046fd1e8967db56c57ccb557addb0216c
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+b9w/h1+Qw/h1+cw/h1+Qw/h1+bJ/h1+:Ce
- TLSH T16BF64A61F5A08172D07A8471C6D6A77AFA3378415B308AC79386DB3C2F276D19A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_b84b3c6c935a8d5f6bcc4cde971810af_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_b84b3c6c935a8d5f6bcc4cde971810af_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_b84b3c6c935a8d5f6bcc4cde971810af_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_remcos_smoke-loader_vidar
- Size 14.9MB
- SHA256 dcfbb24895f0a15125acfaae4859b303d8a77c542ee14881ac86ff3d419ef9e3
- MD5 b84b3c6c935a8d5f6bcc4cde971810af
- SHA1 8d6865f6ddf505da7b2954f1d77a94e446610371
- SHA512 7cb130f66a7d107809ff485693c2025bdb5dea942b3341f3c2113bf00404cdf8061b66e731dcf039c7953495eecb337046fd1e8967db56c57ccb557addb0216c
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+b9w/h1+Qw/h1+cw/h1+Qw/h1+bJ/h1+:Ce
- TLSH T16BF64A61F5A08172D07A8471C6D6A77AFA3378415B308AC79386DB3C2F276D19A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry