General
- Target 2026-07-04_cd6e17dde2dfc5a2f6028cc924c20092_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 11.2MB
- Sample260704-vxnfmsaw61
- SHA256 3031a879608845386b3bfbf1977af7ab342322dbf859bd62dd6472dd6abe4ff3
- MD5 cd6e17dde2dfc5a2f6028cc924c20092
- SHA1 81fae9e561f667911302117d56d638ab4e4e4a21
- SHA512 050829a4ea81ff57d2df81bb9ad7ca0a44ddcf5cde8e74f8cb3f43029431804cb32843ad20bb768ef87fa38f49aa37ae2014b98e1cf7620d1cf8165c71cf2b4f
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+we:p
- TLSH T160C65A91F5A08172D17A8471C696A77AFA337C411B608BC793C6DB3C2F262C19A76733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_cd6e17dde2dfc5a2f6028cc924c20092_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_cd6e17dde2dfc5a2f6028cc924c20092_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_cd6e17dde2dfc5a2f6028cc924c20092_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 11.2MB
- SHA256 3031a879608845386b3bfbf1977af7ab342322dbf859bd62dd6472dd6abe4ff3
- MD5 cd6e17dde2dfc5a2f6028cc924c20092
- SHA1 81fae9e561f667911302117d56d638ab4e4e4a21
- SHA512 050829a4ea81ff57d2df81bb9ad7ca0a44ddcf5cde8e74f8cb3f43029431804cb32843ad20bb768ef87fa38f49aa37ae2014b98e1cf7620d1cf8165c71cf2b4f
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+we:p
- TLSH T160C65A91F5A08172D17A8471C696A77AFA337C411B608BC793C6DB3C2F262C19A76733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry