General
- Target 2026-07-01_3846abd841f0e70cf39a8296fea004d9_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 13.3MB
- Sample260701-vs4l3aa13p
- SHA256 577961b23228486776025f385abcdd8c75c8d08af7780db30544d150cf896cf7
- MD5 3846abd841f0e70cf39a8296fea004d9
- SHA1 3570c0ae9ec369cf368d93940f6729164229512f
- SHA512 4a87eb4b3ae8ef44917691dc9f2e4c948c030adab0f96c78bef03318b1081481b84236ca13678c403c98a117e5c54fe9d8f85fa705958902c74cc853a31370a9
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtza:2cD2cDIEU8IBJa
- TLSH T17EE69D16F6A440F5D17A9534CAA69232EB72BC110B3187CF53A4F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_3846abd841f0e70cf39a8296fea004d9_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_3846abd841f0e70cf39a8296fea004d9_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_3846abd841f0e70cf39a8296fea004d9_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 13.3MB
- SHA256 577961b23228486776025f385abcdd8c75c8d08af7780db30544d150cf896cf7
- MD5 3846abd841f0e70cf39a8296fea004d9
- SHA1 3570c0ae9ec369cf368d93940f6729164229512f
- SHA512 4a87eb4b3ae8ef44917691dc9f2e4c948c030adab0f96c78bef03318b1081481b84236ca13678c403c98a117e5c54fe9d8f85fa705958902c74cc853a31370a9
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtza:2cD2cDIEU8IBJa
- TLSH T17EE69D16F6A440F5D17A9534CAA69232EB72BC110B3187CF53A4F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry