General
- Target 2026-07-02_8cbd0d3f6d80e0dd2fa0021995f11a3b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 26.4MB
- Sample260702-yvsjcsax4m
- SHA256 87dab1faa7c21a78bb3e5a6669a5b51bd4100262ae6432e10f13405d6e005b5f
- MD5 8cbd0d3f6d80e0dd2fa0021995f11a3b
- SHA1 fe40769726215c4d8502d4161aa42a627db5385c
- SHA512 85b8e76c63defe6a8fcb7e0b25d22721afdd39e079c19107e944986a62bed5cf1e841bab7bef70b2a61aa42ced6051d3f82dd9557aa6da74096d9e3af043f2b6
- SSDEEP 196608:JtcIkGn+oKLtcIkGn+oK4tcIkGn+oKLtcIkGn+oKN:I5G+ob5G+oo5G+ob5G+oe
- TLSH T10C576B16B6E440E5C1AAC134CF568632E7B17C294FF097EB6255B2C92E33AD07E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_8cbd0d3f6d80e0dd2fa0021995f11a3b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_8cbd0d3f6d80e0dd2fa0021995f11a3b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_8cbd0d3f6d80e0dd2fa0021995f11a3b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 26.4MB
- SHA256 87dab1faa7c21a78bb3e5a6669a5b51bd4100262ae6432e10f13405d6e005b5f
- MD5 8cbd0d3f6d80e0dd2fa0021995f11a3b
- SHA1 fe40769726215c4d8502d4161aa42a627db5385c
- SHA512 85b8e76c63defe6a8fcb7e0b25d22721afdd39e079c19107e944986a62bed5cf1e841bab7bef70b2a61aa42ced6051d3f82dd9557aa6da74096d9e3af043f2b6
- SSDEEP 196608:JtcIkGn+oKLtcIkGn+oK4tcIkGn+oKLtcIkGn+oKN:I5G+ob5G+oo5G+ob5G+oe
- TLSH T10C576B16B6E440E5C1AAC134CF568632E7B17C294FF097EB6255B2C92E33AD07E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry