General
- Target 2026-07-04_943800d2b5b92cf40a4ef18164248566_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 9.0MB
- Sample260704-sdhpyagy2y
- SHA256 69b8d58c0008a5cb00a399bc573e05f248f3924a516c770ab637eca9402bc71c
- MD5 943800d2b5b92cf40a4ef18164248566
- SHA1 b15a390ff5010033d6452b6c90a11c6e8fa43b4f
- SHA512 b19cf163ee957fd0406852ba4d13bf0ccc50fb22e036855ff00f34d3399f885256e602acddfcad65001b9139cfb40751aee4626c33ff8c9d0f4ea9ef08c46f6d
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+Tu5x6M1c/h1+nu5x6M1c/h1+8u5x6M1c/h1+nVb:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Vb
- TLSH T10A965A91F5A08172D1BA8471C5D6A77AFA337D411B308BC79386DB2C2F272C19A36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_943800d2b5b92cf40a4ef18164248566_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_943800d2b5b92cf40a4ef18164248566_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_943800d2b5b92cf40a4ef18164248566_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 9.0MB
- SHA256 69b8d58c0008a5cb00a399bc573e05f248f3924a516c770ab637eca9402bc71c
- MD5 943800d2b5b92cf40a4ef18164248566
- SHA1 b15a390ff5010033d6452b6c90a11c6e8fa43b4f
- SHA512 b19cf163ee957fd0406852ba4d13bf0ccc50fb22e036855ff00f34d3399f885256e602acddfcad65001b9139cfb40751aee4626c33ff8c9d0f4ea9ef08c46f6d
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+Tu5x6M1c/h1+nu5x6M1c/h1+8u5x6M1c/h1+nVb:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Vb
- TLSH T10A965A91F5A08172D1BA8471C5D6A77AFA337D411B308BC79386DB2C2F272C19A36736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry