General
- Target 2026-07-03_26b1a687f31211e621c7055e2e95ff3a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 30.1MB
- Sample260703-ds9pmsfx8r
- SHA256 c69341ba5863b8cbc710286304aa8fb26566bfb569e39379477c7f10bdc565b1
- MD5 26b1a687f31211e621c7055e2e95ff3a
- SHA1 0dc90839a8803184071d90f7fcd97ea428aa5d5f
- SHA512 b1bbd13bcec90f2058bf42dc63c5197c41544e14158dc855a6a2f56b12fd81517496f41218a4204ca76da6886638af7202c112151ead8581c3be614af3123732
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCi8Vb618U68Vb618Ul8Vb618U68Vb61M:2cDcKcDcO3cDcKcDcO8KDcD
- TLSH T111677C17F6A440F5D16E94308BA69232EA727C520B7197CB4394F62D2F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_26b1a687f31211e621c7055e2e95ff3a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_26b1a687f31211e621c7055e2e95ff3a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_26b1a687f31211e621c7055e2e95ff3a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 30.1MB
- SHA256 c69341ba5863b8cbc710286304aa8fb26566bfb569e39379477c7f10bdc565b1
- MD5 26b1a687f31211e621c7055e2e95ff3a
- SHA1 0dc90839a8803184071d90f7fcd97ea428aa5d5f
- SHA512 b1bbd13bcec90f2058bf42dc63c5197c41544e14158dc855a6a2f56b12fd81517496f41218a4204ca76da6886638af7202c112151ead8581c3be614af3123732
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCi8Vb618U68Vb618Ul8Vb618U68Vb61M:2cDcKcDcO3cDcKcDcO8KDcD
- TLSH T111677C17F6A440F5D16E94308BA69232EA727C520B7197CB4394F62D2F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry