General
- Target 2026-07-04_42a4c4a24f71c2234aae548750b3fe15_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 17.9MB
- Sample260704-xsdrract9w
- SHA256 525b3d6dd40bcc1ff39522f70c7608f7bc43bfdc4cf215451523d25ea3a7f2d5
- MD5 42a4c4a24f71c2234aae548750b3fe15
- SHA1 0f0a08d7e616b92adcb19730ed4140693923045b
- SHA512 91f4b33be8c3651dfcf41aac7516a1c516795494027e5e1598acf508e2b8c8b1e3f2e9a2f6decc15bd83acae0048127d101dd09781b9d6a792ac32baffe35f30
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Yw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+tD:ED
- TLSH T168175A91F5A08172D1B68471C6D6A77AFA337D411B308BC79386DB2C2F272C19A36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_42a4c4a24f71c2234aae548750b3fe15_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_42a4c4a24f71c2234aae548750b3fe15_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_42a4c4a24f71c2234aae548750b3fe15_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 17.9MB
- SHA256 525b3d6dd40bcc1ff39522f70c7608f7bc43bfdc4cf215451523d25ea3a7f2d5
- MD5 42a4c4a24f71c2234aae548750b3fe15
- SHA1 0f0a08d7e616b92adcb19730ed4140693923045b
- SHA512 91f4b33be8c3651dfcf41aac7516a1c516795494027e5e1598acf508e2b8c8b1e3f2e9a2f6decc15bd83acae0048127d101dd09781b9d6a792ac32baffe35f30
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Yw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+tD:ED
- TLSH T168175A91F5A08172D1B68471C6D6A77AFA337D411B308BC79386DB2C2F272C19A36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry