General
- Target 2026-07-02_e162fb838104f2aa5d65da1465f8c326_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 33.7MB
- Sample260702-rvrthafz4w
- SHA256 3ef20c96de56769c0f456beb07c5c6d48009d8e77a9b272b6aa890a18bb92de2
- MD5 e162fb838104f2aa5d65da1465f8c326
- SHA1 4151b21f4e8c13caca8c46422629d9753c16cf77
- SHA512 a1ee89b690577e6825d4cf2fdbbdc028019409d38214ef16ca186a7d2efa99cf2615cae42d96a8de297dd8182568f9c48c90eae3407ea8f4d69faf836e53232c
- SSDEEP 196608:JtcIkGnk2VhptcIkGnk2VhioKLtcIkGnk2VhptcIkGnk2VhioKc:I5Gkea5GkeMob5Gkea5GkeMoT
- TLSH T130776B17B2A440E5C19AC134CB468632E7B17C594BF1A7EF6251B6CA2F33AD07B3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_e162fb838104f2aa5d65da1465f8c326_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_e162fb838104f2aa5d65da1465f8c326_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_e162fb838104f2aa5d65da1465f8c326_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 33.7MB
- SHA256 3ef20c96de56769c0f456beb07c5c6d48009d8e77a9b272b6aa890a18bb92de2
- MD5 e162fb838104f2aa5d65da1465f8c326
- SHA1 4151b21f4e8c13caca8c46422629d9753c16cf77
- SHA512 a1ee89b690577e6825d4cf2fdbbdc028019409d38214ef16ca186a7d2efa99cf2615cae42d96a8de297dd8182568f9c48c90eae3407ea8f4d69faf836e53232c
- SSDEEP 196608:JtcIkGnk2VhptcIkGnk2VhioKLtcIkGnk2VhptcIkGnk2VhioKc:I5Gkea5GkeMob5Gkea5GkeMoT
- TLSH T130776B17B2A440E5C19AC134CB468632E7B17C594BF1A7EF6251B6CA2F33AD07B3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry