General
- Target 2026-06-30_4b0129fbb08db2dc3d28bc8c6358eb7d_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 24.6MB
- Sample260630-2sw1jsa191
- SHA256 8ad40950ae3b3c73e3f245348795ac120479f931afd2ef2dd12fe442e8fc22f7
- MD5 4b0129fbb08db2dc3d28bc8c6358eb7d
- SHA1 7207e366fa53e0b5f4b6e65cea612d364a64a73f
- SHA512 a1548b503233c2e60e008a94690672efcc26985fb2c8a89d1dab374c1fd7121bcde660ef504ef23484935f52f91ace7fba3c6b31fb0fc640b4a6835c824081da
- SSDEEP 196608:l8Vb618U68Vb618UbKzQcIzoKFGnFh8Vb618U68Vb618UbKzQcIzoKFGnFccb:2cDc3KR0oyGIcDc3KR0oyGR
- TLSH T1BD477B26B6E540E5D0AAC534CF568232E7B27C254FB097DB5250B2892F33AD07F3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_4b0129fbb08db2dc3d28bc8c6358eb7d_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_4b0129fbb08db2dc3d28bc8c6358eb7d_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_4b0129fbb08db2dc3d28bc8c6358eb7d_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 24.6MB
- SHA256 8ad40950ae3b3c73e3f245348795ac120479f931afd2ef2dd12fe442e8fc22f7
- MD5 4b0129fbb08db2dc3d28bc8c6358eb7d
- SHA1 7207e366fa53e0b5f4b6e65cea612d364a64a73f
- SHA512 a1548b503233c2e60e008a94690672efcc26985fb2c8a89d1dab374c1fd7121bcde660ef504ef23484935f52f91ace7fba3c6b31fb0fc640b4a6835c824081da
- SSDEEP 196608:l8Vb618U68Vb618UbKzQcIzoKFGnFh8Vb618U68Vb618UbKzQcIzoKFGnFccb:2cDc3KR0oyGIcDc3KR0oyGR
- TLSH T1BD477B26B6E540E5D0AAC534CF568232E7B27C254FB097DB5250B2892F33AD07F3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry