General
- Target 2026-07-03_3a977e5cb174002b511e41aba43d7005_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 28.6MB
- Sample260703-wgswvsav3j
- SHA256 149cc362aeba03a029e1bbf98846506bed99f4b915c0411bf4cf8dbba584054f
- MD5 3a977e5cb174002b511e41aba43d7005
- SHA1 79896c1d5651a08f40a73d99bf6967918a2e08f7
- SHA512 06821aa24c1d12c0cfe32454903c0351147c7fe3acaee2b43490b97fe841c1696abca3244a608f0c72358ee8133acb04d334035e772885bab45e308287140f74
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzSp8Vb618U68Vbb8Vb618U68a:2cD2cDIEU8IBJSacD2cDIEU8IBJS/G
- TLSH T13A679D16F6A440F5E1BAC5348AA69232EB72BC110B3197CF5364F65D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_3a977e5cb174002b511e41aba43d7005_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_3a977e5cb174002b511e41aba43d7005_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_3a977e5cb174002b511e41aba43d7005_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 28.6MB
- SHA256 149cc362aeba03a029e1bbf98846506bed99f4b915c0411bf4cf8dbba584054f
- MD5 3a977e5cb174002b511e41aba43d7005
- SHA1 79896c1d5651a08f40a73d99bf6967918a2e08f7
- SHA512 06821aa24c1d12c0cfe32454903c0351147c7fe3acaee2b43490b97fe841c1696abca3244a608f0c72358ee8133acb04d334035e772885bab45e308287140f74
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzSp8Vb618U68Vbb8Vb618U68a:2cD2cDIEU8IBJSacD2cDIEU8IBJS/G
- TLSH T13A679D16F6A440F5E1BAC5348AA69232EB72BC110B3197CF5364F65D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry