General
- Target 2026-06-27_04fe8d19cd9c743b7b9e193f0cf0dc38_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 8.0MB
- Sample260629-mkmdtaay51
- SHA256 5b5853304f4a04dd58a1d0e8270c3bef67c84dd58e91550ac91f0e7ba616a600
- MD5 04fe8d19cd9c743b7b9e193f0cf0dc38
- SHA1 4f28f9cc64bad8ccde8f3aa4ae082a245f8eb1a1
- SHA512 eb12c8bc115686e9e08fc410cadc9b98e1af53d5209d4f43e1d00575e4641384bb27a1ec2c8ede6f4dee6dccd692cfc9f0922306f680c55714315b6902149494
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+Tu5x6M1c/h1+nu5x6M1c/h1+52ezSC6v2XMH:Jw/h1+Qw/h1+cw/h1+Qw/h1+51
- TLSH T114865B51F5A48272D0BA8075C6D6A77AFA3378411B308AC75386DB3C2F272D19A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_04fe8d19cd9c743b7b9e193f0cf0dc38_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_04fe8d19cd9c743b7b9e193f0cf0dc38_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260618-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_04fe8d19cd9c743b7b9e193f0cf0dc38_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 8.0MB
- SHA256 5b5853304f4a04dd58a1d0e8270c3bef67c84dd58e91550ac91f0e7ba616a600
- MD5 04fe8d19cd9c743b7b9e193f0cf0dc38
- SHA1 4f28f9cc64bad8ccde8f3aa4ae082a245f8eb1a1
- SHA512 eb12c8bc115686e9e08fc410cadc9b98e1af53d5209d4f43e1d00575e4641384bb27a1ec2c8ede6f4dee6dccd692cfc9f0922306f680c55714315b6902149494
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+Tu5x6M1c/h1+nu5x6M1c/h1+52ezSC6v2XMH:Jw/h1+Qw/h1+cw/h1+Qw/h1+51
- TLSH T114865B51F5A48272D0BA8075C6D6A77AFA3378411B308AC75386DB3C2F272D19A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry