General
- Target 2026-06-27_08282730d4a7c4da087ca3c1dfea4293_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 45.6MB
- Sample260629-mebecscy4n
- SHA256 9871c3d81dcb44b687f2dee3c4417fee5c05b11ae6341582b128577dcdb9ba82
- MD5 08282730d4a7c4da087ca3c1dfea4293
- SHA1 ab5880bc4d522c1c76d08637b7ea216d1757ba30
- SHA512 ad407c05bc8f34e0abb01302cac453164b22b566ea6d14784a59a168b7bf44e72384026acd9c95f7e371874a16862d36c8024e976903d5f7716daa0b4cb5199e
- SSDEEP 393216:2cDc3KR0oyGHvyEYKb7cDc3KR0oyGHvyEYKbiwdcDc3KR0oyGHH:tAaR9RPaAaR9RPbWAaR9Rn
- TLSH T167A77C26B6E540E4D0AAD134CB668632E7B27C154FB097DB4250F29E2F33AD07E39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_08282730d4a7c4da087ca3c1dfea4293_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_08282730d4a7c4da087ca3c1dfea4293_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260617-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_08282730d4a7c4da087ca3c1dfea4293_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 45.6MB
- SHA256 9871c3d81dcb44b687f2dee3c4417fee5c05b11ae6341582b128577dcdb9ba82
- MD5 08282730d4a7c4da087ca3c1dfea4293
- SHA1 ab5880bc4d522c1c76d08637b7ea216d1757ba30
- SHA512 ad407c05bc8f34e0abb01302cac453164b22b566ea6d14784a59a168b7bf44e72384026acd9c95f7e371874a16862d36c8024e976903d5f7716daa0b4cb5199e
- SSDEEP 393216:2cDc3KR0oyGHvyEYKb7cDc3KR0oyGHvyEYKbiwdcDc3KR0oyGHH:tAaR9RPaAaR9RPbWAaR9Rn
- TLSH T167A77C26B6E540E4D0AAD134CB668632E7B27C154FB097DB4250F29E2F33AD07E39716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry