General
- Target 2026-07-03_4d1ad4fbbb46af5505cbba7ae298c393_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 17.4MB
- Sample260703-tk5nqacw2z
- SHA256 47b9cb97f313fda1152e60369025eeb53023d3a5aefaf9466238a434df6840ad
- MD5 4d1ad4fbbb46af5505cbba7ae298c393
- SHA1 e3f78873d0e37168576be335ef25b0dfcf59654f
- SHA512 f5ec706d4f36733a18aa49e3c65598955f67d79c55051fb4aed806efb02b1639b145ca4efb4df2a0ef68f82cbce5f6946037bbac654a747dd92267a1c1bbaaba
- SSDEEP 196608:l8Vb618U68Vb618UbKzQcIx8Vb618U68Vb618UbKzQcIm:2cDc3KRjcDc3KRn
- TLSH T16E075A22B6E200A9D16E9431CF568331D7E27C658FF097DB9254B2891F336D07E3A71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_4d1ad4fbbb46af5505cbba7ae298c393_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_4d1ad4fbbb46af5505cbba7ae298c393_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_4d1ad4fbbb46af5505cbba7ae298c393_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 17.4MB
- SHA256 47b9cb97f313fda1152e60369025eeb53023d3a5aefaf9466238a434df6840ad
- MD5 4d1ad4fbbb46af5505cbba7ae298c393
- SHA1 e3f78873d0e37168576be335ef25b0dfcf59654f
- SHA512 f5ec706d4f36733a18aa49e3c65598955f67d79c55051fb4aed806efb02b1639b145ca4efb4df2a0ef68f82cbce5f6946037bbac654a747dd92267a1c1bbaaba
- SSDEEP 196608:l8Vb618U68Vb618UbKzQcIx8Vb618U68Vb618UbKzQcIm:2cDc3KRjcDc3KRn
- TLSH T16E075A22B6E200A9D16E9431CF568331D7E27C658FF097DB9254B2891F336D07E3A71A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry