General
- Target 2026-07-04_eea3dff2585e52a40e0dd46982a05b67_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 19.0MB
- Sample260704-rrzpyab15n
- SHA256 c7bf9b90bf571b938847fa821357c03ee438e8f27283d0c6c8262dd5bad62fdf
- MD5 eea3dff2585e52a40e0dd46982a05b67
- SHA1 b6772a0520fba758f8f81db53b9e3d423298c78d
- SHA512 35d619cac328f5323eeb41b48356628efa6f4846157dd4d3f0c9548052709a9146939cf0926fcf160ad6cc50271f6e7f6d511590db580c108950a6925bd319f2
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbC/8Vb618U68Vbb8Vb618U68VbC4/h1+:2cD2cDtcD2cD
- TLSH T10317AE17F6A440F5D17A983086A69336EB72BC110B3197CB93A4F61D1F336D09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_eea3dff2585e52a40e0dd46982a05b67_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_eea3dff2585e52a40e0dd46982a05b67_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_eea3dff2585e52a40e0dd46982a05b67_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 19.0MB
- SHA256 c7bf9b90bf571b938847fa821357c03ee438e8f27283d0c6c8262dd5bad62fdf
- MD5 eea3dff2585e52a40e0dd46982a05b67
- SHA1 b6772a0520fba758f8f81db53b9e3d423298c78d
- SHA512 35d619cac328f5323eeb41b48356628efa6f4846157dd4d3f0c9548052709a9146939cf0926fcf160ad6cc50271f6e7f6d511590db580c108950a6925bd319f2
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbC/8Vb618U68Vbb8Vb618U68VbC4/h1+:2cD2cDtcD2cD
- TLSH T10317AE17F6A440F5D17A983086A69336EB72BC110B3197CB93A4F61D1F336D09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry