General
- Target 2026-06-30_f7785d216ee0b7abb8f596f58a3141db_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 65.9MB
- Sample260630-vstrvsdw5x
- SHA256 116dde5ca4bdcf487f0f1b461539d95b36b131641c5e284bb999805ceaa734fd
- MD5 f7785d216ee0b7abb8f596f58a3141db
- SHA1 000d03cbdeee5cbe8900932a52d63843a6e75dae
- SHA512 4b52b48b108b5fbe8877a24fd8af46770a7d98a34fdaac08a0a362ebc268884231ec237fdcedb6ee8a6194f68343a3b652b96fa0419c779a3478f4cee6326318
- SSDEEP 393216:2c7cSc7c9c7cSc7ckc7cSc7c9clc7cSc7c9c7cSc7ckc7cSc7c9cfvyEYKbi:tYRY2YRY/YRY2eYRY2YRY/YRY2XA
- TLSH T1ECE78D17E69440F5D16E95308BAA9632FB73B8120B7197CB43A4C62D1F336D06E3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_f7785d216ee0b7abb8f596f58a3141db_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_f7785d216ee0b7abb8f596f58a3141db_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_f7785d216ee0b7abb8f596f58a3141db_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 65.9MB
- SHA256 116dde5ca4bdcf487f0f1b461539d95b36b131641c5e284bb999805ceaa734fd
- MD5 f7785d216ee0b7abb8f596f58a3141db
- SHA1 000d03cbdeee5cbe8900932a52d63843a6e75dae
- SHA512 4b52b48b108b5fbe8877a24fd8af46770a7d98a34fdaac08a0a362ebc268884231ec237fdcedb6ee8a6194f68343a3b652b96fa0419c779a3478f4cee6326318
- SSDEEP 393216:2c7cSc7c9c7cSc7ckc7cSc7c9clc7cSc7c9c7cSc7ckc7cSc7c9cfvyEYKbi:tYRY2YRY/YRY2eYRY2YRY/YRY2XA
- TLSH T1ECE78D17E69440F5D16E95308BAA9632FB73B8120B7197CB43A4C62D1F336D06E3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry