General
- Target 2026-07-03_167d553cbff1ccddb407bccc7fe48ae3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 20.0MB
- Sample260703-wlcensav9m
- SHA256 06eece693f599240c9f8b78d428d18783b44d95b42314a71573504824ae7a879
- MD5 167d553cbff1ccddb407bccc7fe48ae3
- SHA1 1be7aa513381c300274a0c56d0661f2afb6ec155
- SHA512 041a76d68f04cb6506936281b97f7791602c588dc7acf7ec350b3040c6f1a6d830157a729083e720b4d6df1aa51757470205859754ae8407edc9ebe3843322d2
- SSDEEP 196608:l8Vb618U68Vb618UbKzQcIx8Vb618U68Vb618UbKzQcIs2Vh:2cDc3KRjcDc3KRpe
- TLSH T1EC276A22B2E240A9D06E9431CF568231D7E27C654FF097DB9250B2992F736D07F3A71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_167d553cbff1ccddb407bccc7fe48ae3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_167d553cbff1ccddb407bccc7fe48ae3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_167d553cbff1ccddb407bccc7fe48ae3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 20.0MB
- SHA256 06eece693f599240c9f8b78d428d18783b44d95b42314a71573504824ae7a879
- MD5 167d553cbff1ccddb407bccc7fe48ae3
- SHA1 1be7aa513381c300274a0c56d0661f2afb6ec155
- SHA512 041a76d68f04cb6506936281b97f7791602c588dc7acf7ec350b3040c6f1a6d830157a729083e720b4d6df1aa51757470205859754ae8407edc9ebe3843322d2
- SSDEEP 196608:l8Vb618U68Vb618UbKzQcIx8Vb618U68Vb618UbKzQcIs2Vh:2cDc3KRjcDc3KRpe
- TLSH T1EC276A22B2E240A9D06E9431CF568231D7E27C654FF097DB9250B2992F736D07F3A71A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry