General
- Target 2026-06-30_56fb3a6c0c9f8b6b7cde444c173e5db9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 32.2MB
- Sample260630-2ejs3aay2w
- SHA256 8b77f5341fa03373cab6b7419d8fc8c355818608d19279030e5e7b79a90c7753
- MD5 56fb3a6c0c9f8b6b7cde444c173e5db9
- SHA1 cd90954a196e92185a3f26d9645f682d00801e59
- SHA512 5ae58989e95fc5325530408d58883df17359d417c34123906fa6e340bfaf2f6e1ebd4a296ad39b44cdffbe0ff05edb01387bf3ed456d45c4a9ad00efce5d0a07
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vb618U68Vb618US18UfWoKk8Vb618U68Vb618US12:2cDcy+cDcyqoGcDcy+cDcyqoSo
- TLSH T106779D13F69440F9D06ED5748A569232EA72BC520B31ABDF4390F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_56fb3a6c0c9f8b6b7cde444c173e5db9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_56fb3a6c0c9f8b6b7cde444c173e5db9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_56fb3a6c0c9f8b6b7cde444c173e5db9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 32.2MB
- SHA256 8b77f5341fa03373cab6b7419d8fc8c355818608d19279030e5e7b79a90c7753
- MD5 56fb3a6c0c9f8b6b7cde444c173e5db9
- SHA1 cd90954a196e92185a3f26d9645f682d00801e59
- SHA512 5ae58989e95fc5325530408d58883df17359d417c34123906fa6e340bfaf2f6e1ebd4a296ad39b44cdffbe0ff05edb01387bf3ed456d45c4a9ad00efce5d0a07
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vb618U68Vb618US18UfWoKk8Vb618U68Vb618US12:2cDcy+cDcyqoGcDcy+cDcyqoSo
- TLSH T106779D13F69440F9D06ED5748A569232EA72BC520B31ABDF4390F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry