General
- Target 2026-06-27_a082b9c55dcdaf9d23273b2fa1c949fb_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 18.3MB
- Sample260629-e5mw3sc141
- SHA256 1a97f7ee50ffcd39d4a355504ea242deae38dfc4dd47bd000ca6f1bb4680edd0
- MD5 a082b9c55dcdaf9d23273b2fa1c949fb
- SHA1 6815e8c427689791647e45f9197f9ecf3461c44a
- SHA512 4ac331547df10ebfae9a9ab01b69e8e6408e03cfab0e1f51d2bb37ff0626c961d0cead274b12b805735f2c0f581e28af7c9d548e589d0f983eff633c61a32cd6
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+5lw/h1+Qw/h1+cw/h1+Qw/h1+5KvyEYc/b3w8O:evyEYKbi
- TLSH T13E175B51F6A481B1D07A8074C6A6A776FA3378421B308BCB5385DB2D2F376D09E36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_a082b9c55dcdaf9d23273b2fa1c949fb_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_a082b9c55dcdaf9d23273b2fa1c949fb_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_a082b9c55dcdaf9d23273b2fa1c949fb_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 18.3MB
- SHA256 1a97f7ee50ffcd39d4a355504ea242deae38dfc4dd47bd000ca6f1bb4680edd0
- MD5 a082b9c55dcdaf9d23273b2fa1c949fb
- SHA1 6815e8c427689791647e45f9197f9ecf3461c44a
- SHA512 4ac331547df10ebfae9a9ab01b69e8e6408e03cfab0e1f51d2bb37ff0626c961d0cead274b12b805735f2c0f581e28af7c9d548e589d0f983eff633c61a32cd6
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+5lw/h1+Qw/h1+cw/h1+Qw/h1+5KvyEYc/b3w8O:evyEYKbi
- TLSH T13E175B51F6A481B1D07A8074C6A6A776FA3378421B308BCB5385DB2D2F376D09E36736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry