General
- Target 2026-07-02_efc44281e2ba82136bfd12ebda32d8f4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 8.6MB
- Sample260702-tlz5maev3r
- SHA256 97de0104a507d3e7cd1745745de79009e93e3bb672efa901fd8d1b5a124e7118
- MD5 efc44281e2ba82136bfd12ebda32d8f4
- SHA1 935e2dd1de3cc64017fd9c76491739f06679283c
- SHA512 472cd6c430b42a842a1d88a5e7bdf143b1a6c2d89cc8059e7887444a0d32ec3036d027c48bea25122acf1bf83292d988e6c1cb21446735811937ca6bbba08dd5
- SSDEEP 98304:Su5x6M1WoDDIu5x6M1WoDDfu5x6M1WoDDIu5x6M1WoDDd:Ji87i8Ii87i8d
- TLSH T16B968D81F2904076E26E0930C2699636B7B7BD521791C7CFA6D1FA7E2F323C05972627
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_efc44281e2ba82136bfd12ebda32d8f4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_efc44281e2ba82136bfd12ebda32d8f4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_efc44281e2ba82136bfd12ebda32d8f4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 8.6MB
- SHA256 97de0104a507d3e7cd1745745de79009e93e3bb672efa901fd8d1b5a124e7118
- MD5 efc44281e2ba82136bfd12ebda32d8f4
- SHA1 935e2dd1de3cc64017fd9c76491739f06679283c
- SHA512 472cd6c430b42a842a1d88a5e7bdf143b1a6c2d89cc8059e7887444a0d32ec3036d027c48bea25122acf1bf83292d988e6c1cb21446735811937ca6bbba08dd5
- SSDEEP 98304:Su5x6M1WoDDIu5x6M1WoDDfu5x6M1WoDDIu5x6M1WoDDd:Ji87i8Ii87i8d
- TLSH T16B968D81F2904076E26E0930C2699636B7B7BD521791C7CFA6D1FA7E2F323C05972627
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry