General
- Target 2026-06-30_1f0cce784af67380d622d7bbef9494bc_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 58.3MB
- Sample260701-ak1j8aaz2r
- SHA256 60774186b3ebe51abdf799a14031d7185626ef931904043f9c6a09d982b6222d
- MD5 1f0cce784af67380d622d7bbef9494bc
- SHA1 0f79704da2d89f091002b6cd2658831e16828b71
- SHA512 16497d007f1346f0dfa33edc8803087048a0e762edb6f3936cce7931813ad4e04aff99829fa3a908b87df1fb97a4e2494a3052e111fb77d753e8fcca3a5fa580
- SSDEEP 1572864:tAyZ0AyZTAyZ0AyZMAyZ0AyZTAyZ0AyZ/:tAyeAyJAyeAyOAyeAyJAyeAyF
- TLSH T1F4D78D17F6A441F9D06AD5748A969236EA72BC520B309BCF4390F7192F33AD05F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_1f0cce784af67380d622d7bbef9494bc_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_1f0cce784af67380d622d7bbef9494bc_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_1f0cce784af67380d622d7bbef9494bc_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 58.3MB
- SHA256 60774186b3ebe51abdf799a14031d7185626ef931904043f9c6a09d982b6222d
- MD5 1f0cce784af67380d622d7bbef9494bc
- SHA1 0f79704da2d89f091002b6cd2658831e16828b71
- SHA512 16497d007f1346f0dfa33edc8803087048a0e762edb6f3936cce7931813ad4e04aff99829fa3a908b87df1fb97a4e2494a3052e111fb77d753e8fcca3a5fa580
- SSDEEP 1572864:tAyZ0AyZTAyZ0AyZMAyZ0AyZTAyZ0AyZ/:tAyeAyJAyeAyOAyeAyJAyeAyF
- TLSH T1F4D78D17F6A441F9D06AD5748A969236EA72BC520B309BCF4390F7192F33AD05F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry