General
- Target 2026-07-02_2f388f17566e53e20c25bfd50d516f6b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.4MB
- Sample260702-2w4vkacz2k
- SHA256 a3e0442dd7d42b309e2454cffb3c9dce3f6baded513e044924e36e0db52a606e
- MD5 2f388f17566e53e20c25bfd50d516f6b
- SHA1 be72fa4c9799f8edbab523f1e3dafa7108de338c
- SHA512 9b57a05764c2ddd8256bbc5daa359e9ea9e5eefd6d297b5c31625944265d9d2eceddb9ebb7ee7d66b8475141d3b2c3a93440783de43da82b7c343e4540622bd5
- SSDEEP 196608:l8Vb618U68Vb618US18UGWqQI0pyS8Vb618U68r:2cDcyqWqQjpWcDr
- TLSH T1F7F68D13F6A940E9E06ED5748A669332EA72BC520B31A6CF4350F7191F33AD05F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_2f388f17566e53e20c25bfd50d516f6b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_2f388f17566e53e20c25bfd50d516f6b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_2f388f17566e53e20c25bfd50d516f6b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.4MB
- SHA256 a3e0442dd7d42b309e2454cffb3c9dce3f6baded513e044924e36e0db52a606e
- MD5 2f388f17566e53e20c25bfd50d516f6b
- SHA1 be72fa4c9799f8edbab523f1e3dafa7108de338c
- SHA512 9b57a05764c2ddd8256bbc5daa359e9ea9e5eefd6d297b5c31625944265d9d2eceddb9ebb7ee7d66b8475141d3b2c3a93440783de43da82b7c343e4540622bd5
- SSDEEP 196608:l8Vb618U68Vb618US18UGWqQI0pyS8Vb618U68r:2cDcyqWqQjpWcDr
- TLSH T1F7F68D13F6A940E9E06ED5748A669332EA72BC520B31A6CF4350F7191F33AD05F39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry