General
- Target 2026-06-27_ad8ce6a0e87ed32b8ef7cfc3d1020c41_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 14.2MB
- Sample260629-ejfwmsdy4n
- SHA256 2594d8fc950a2d287541bd4ee5bfd765377c9fa3f2bad6a42f43200f260ef0ac
- MD5 ad8ce6a0e87ed32b8ef7cfc3d1020c41
- SHA1 d0e90a60398d741e1bdaa363253afb77332abb87
- SHA512 05a2a25895495e5dbe40dd960406d6c6bb88d4cb5da1a2b2daa139ffcc59f8e1582a18dbde4c918177b42415437e8f0300331f384732e99c20af8a887d8bf8d8
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+5lw/h1+Qw/h1+cw/h1+Qw/h1+5G:i
- TLSH T130E65A91F5A08172D17A8471C696A77AFA3378411B708BC79386DB3C2F272C19A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_ad8ce6a0e87ed32b8ef7cfc3d1020c41_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_ad8ce6a0e87ed32b8ef7cfc3d1020c41_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_ad8ce6a0e87ed32b8ef7cfc3d1020c41_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 14.2MB
- SHA256 2594d8fc950a2d287541bd4ee5bfd765377c9fa3f2bad6a42f43200f260ef0ac
- MD5 ad8ce6a0e87ed32b8ef7cfc3d1020c41
- SHA1 d0e90a60398d741e1bdaa363253afb77332abb87
- SHA512 05a2a25895495e5dbe40dd960406d6c6bb88d4cb5da1a2b2daa139ffcc59f8e1582a18dbde4c918177b42415437e8f0300331f384732e99c20af8a887d8bf8d8
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+5lw/h1+Qw/h1+cw/h1+Qw/h1+5G:i
- TLSH T130E65A91F5A08172D17A8471C696A77AFA3378411B708BC79386DB3C2F272C19A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry