General
- Target 2026-07-01_414c4a21c91b887677d46d46e66a9735_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 13.5MB
- Sample260701-vrvmrscw7x
- SHA256 0e6a1345fb759466072e81acaf516b6678706b231e9f56e6bcdcb333d9426f64
- MD5 414c4a21c91b887677d46d46e66a9735
- SHA1 f56d1f6010f74da2a027eeae7a6192bbeaf0b7b8
- SHA512 dc8529b2ccdeea277ca26caef62df91de4f7a390f73344680c57fd4f5fa2b0f0ca82de1a35113b51e21427b80565ab58232750505bc246af02abfe03e2a3323f
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzn:2cD2cDIEU8IBJn
- TLSH T101E69D16F6A440F5E17B95348AA69232EB72BC120B3187CF5364F65D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_414c4a21c91b887677d46d46e66a9735_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_414c4a21c91b887677d46d46e66a9735_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_414c4a21c91b887677d46d46e66a9735_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 13.5MB
- SHA256 0e6a1345fb759466072e81acaf516b6678706b231e9f56e6bcdcb333d9426f64
- MD5 414c4a21c91b887677d46d46e66a9735
- SHA1 f56d1f6010f74da2a027eeae7a6192bbeaf0b7b8
- SHA512 dc8529b2ccdeea277ca26caef62df91de4f7a390f73344680c57fd4f5fa2b0f0ca82de1a35113b51e21427b80565ab58232750505bc246af02abfe03e2a3323f
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzn:2cD2cDIEU8IBJn
- TLSH T101E69D16F6A440F5E17B95348AA69232EB72BC120B3187CF5364F65D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry