General
- Target 2026-06-29_b11935f78dd1b08ecb5f46c7560ecff3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_remcos_smoke-loader_stealc_vidar
- Size 31.0MB
- Sample260630-fe95csft4l
- SHA256 8acdc506c6cea85760d069a268260a2e1a90a1d1faa23949b28341346ecdee1d
- MD5 b11935f78dd1b08ecb5f46c7560ecff3
- SHA1 31457697c568593a427ca239c7a487bc73296765
- SHA512 12f0c444ce8b955c62a1a6046671e9ef4362204e1536a8fcdb94794674d55664ed487dfa46f6fac266f1fb02bb548703a586bf7cabb1d0dca67e9ed47cd8fc86
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+iUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHw:zUEtQevvqc2W1cpV2XI32w
- TLSH T137674A91B6E483E2D3AA953485B182B6FB727C0E1F31977B4179F22E1F372905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-29_b11935f78dd1b08ecb5f46c7560ecff3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-29_b11935f78dd1b08ecb5f46c7560ecff3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-29_b11935f78dd1b08ecb5f46c7560ecff3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_remcos_smoke-loader_stealc_vidar
- Size 31.0MB
- SHA256 8acdc506c6cea85760d069a268260a2e1a90a1d1faa23949b28341346ecdee1d
- MD5 b11935f78dd1b08ecb5f46c7560ecff3
- SHA1 31457697c568593a427ca239c7a487bc73296765
- SHA512 12f0c444ce8b955c62a1a6046671e9ef4362204e1536a8fcdb94794674d55664ed487dfa46f6fac266f1fb02bb548703a586bf7cabb1d0dca67e9ed47cd8fc86
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+iUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHw:zUEtQevvqc2W1cpV2XI32w
- TLSH T137674A91B6E483E2D3AA953485B182B6FB727C0E1F31977B4179F22E1F372905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry