General
- Target 2026-06-27_a81558b8047e4653d59e548fcd779bd5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_remcos_smoke-loader_vidar
- Size 14.2MB
- Sample260629-esls9ad12l
- SHA256 5b041e35c538fa90a08ba692008ecfc9418bbe164e95ad5b1373fd0159029074
- MD5 a81558b8047e4653d59e548fcd779bd5
- SHA1 292661d4156767906d31b20ba2384f1e173b0096
- SHA512 f59a27037c3a6bbd9649cee7729520b213477392511e148e02c1e548dbf754e2d0c7c67773a853b03a949875646675e825812ca930717770401c7383a7dd6da1
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+b9w/h1+Qw/h1+cw/h1+Qw/h1+bi:Cei
- TLSH T1BDE65A91F5A08172D17A8471C696A77AFA3378411B708BC79386DB3C2F272C19A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_a81558b8047e4653d59e548fcd779bd5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_a81558b8047e4653d59e548fcd779bd5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_a81558b8047e4653d59e548fcd779bd5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_remcos_smoke-loader_vidar
- Size 14.2MB
- SHA256 5b041e35c538fa90a08ba692008ecfc9418bbe164e95ad5b1373fd0159029074
- MD5 a81558b8047e4653d59e548fcd779bd5
- SHA1 292661d4156767906d31b20ba2384f1e173b0096
- SHA512 f59a27037c3a6bbd9649cee7729520b213477392511e148e02c1e548dbf754e2d0c7c67773a853b03a949875646675e825812ca930717770401c7383a7dd6da1
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+b9w/h1+Qw/h1+cw/h1+Qw/h1+bi:Cei
- TLSH T1BDE65A91F5A08172D17A8471C696A77AFA3378411B708BC79386DB3C2F272C19A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry