General
- Target 2026-06-25_c1063da4258fe3ac878d2b9330031ab7_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 15.7MB
- Sample260629-yr68caft4k
- SHA256 a63bafe99944d6d07d29f9939d03641372dc819df55f9e00860dfd482c54e260
- MD5 c1063da4258fe3ac878d2b9330031ab7
- SHA1 c6a24ce161783fb7e111c47ecbf28a73474b517d
- SHA512 f67edc647eca80fa88b76e50ce20a23aacbc4a276682f057ce4458502b6135b1e7be4df5a581038bb9ea591dc06e3ab46aa5a8e8e4a2e71335a4206c25a98bd6
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vb618U68Vb618US18UfWoKv:2cDcy+cDcyqoE
- TLSH T1A3F69D17F69440F9D06ED5748A558232EA72BC520B31ABDF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-25_c1063da4258fe3ac878d2b9330031ab7_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-25_c1063da4258fe3ac878d2b9330031ab7_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-25_c1063da4258fe3ac878d2b9330031ab7_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 15.7MB
- SHA256 a63bafe99944d6d07d29f9939d03641372dc819df55f9e00860dfd482c54e260
- MD5 c1063da4258fe3ac878d2b9330031ab7
- SHA1 c6a24ce161783fb7e111c47ecbf28a73474b517d
- SHA512 f67edc647eca80fa88b76e50ce20a23aacbc4a276682f057ce4458502b6135b1e7be4df5a581038bb9ea591dc06e3ab46aa5a8e8e4a2e71335a4206c25a98bd6
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vb618U68Vb618US18UfWoKv:2cDcy+cDcyqoE
- TLSH T1A3F69D17F69440F9D06ED5748A558232EA72BC520B31ABDF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry