General
- Target 2026-07-04_a891c873a199455d151d4c8aa0e40426_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 18.2MB
- Sample260704-wfac5aey5p
- SHA256 6c67fa484f834f82db37dc62b14080ab485e51e2157bee771702756bebe59e9e
- MD5 a891c873a199455d151d4c8aa0e40426
- SHA1 4eee3cd046c28133a38e2f22c3028afeee847596
- SHA512 76e743f2d61af77fd40fb69f99c4ea21f40c5bfd36b8744c0a4ce1ee53727baf9bcf55a33fe1c71d2592e89b4fe7c822a91b012e2c296c48420b5275561fc16f
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Yw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+t:i
- TLSH T11C175A91F5A08172D1B68471C6D6A77AFA337D411B308BC79386DB2C2F272C19A36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_a891c873a199455d151d4c8aa0e40426_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_a891c873a199455d151d4c8aa0e40426_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_a891c873a199455d151d4c8aa0e40426_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 18.2MB
- SHA256 6c67fa484f834f82db37dc62b14080ab485e51e2157bee771702756bebe59e9e
- MD5 a891c873a199455d151d4c8aa0e40426
- SHA1 4eee3cd046c28133a38e2f22c3028afeee847596
- SHA512 76e743f2d61af77fd40fb69f99c4ea21f40c5bfd36b8744c0a4ce1ee53727baf9bcf55a33fe1c71d2592e89b4fe7c822a91b012e2c296c48420b5275561fc16f
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Yw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+t:i
- TLSH T11C175A91F5A08172D1B68471C6D6A77AFA337D411B308BC79386DB2C2F272C19A36736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry