General
- Target 2026-07-06_fbb188f01611439e4705a0eb6c50ec14_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 21.3MB
- Sample260706-3rnhfsaw3j
- SHA256 1e33e82eedd085c4d0e93bbe59f8875e23da31cf200bab1ea7adc0d92af939e3
- MD5 fbb188f01611439e4705a0eb6c50ec14
- SHA1 5dd024a6658fe850251c3f1ed1c3dddf840f4221
- SHA512 6a12741a08c0fa1bca6b6fafeb56c9dbb42e7e11c409d33b3b75dea6ca2a99e6dfe03a94e7df95b01a5e643c0787475361b5bd0a17e87e7f39dd10280ca496ba
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Yw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+5KzV:wKyG
- TLSH T1D9376C51F5A08171D0BA8071C696A776FA727C415B308BCB9386EB2C2F376D09A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_fbb188f01611439e4705a0eb6c50ec14_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_fbb188f01611439e4705a0eb6c50ec14_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_fbb188f01611439e4705a0eb6c50ec14_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 21.3MB
- SHA256 1e33e82eedd085c4d0e93bbe59f8875e23da31cf200bab1ea7adc0d92af939e3
- MD5 fbb188f01611439e4705a0eb6c50ec14
- SHA1 5dd024a6658fe850251c3f1ed1c3dddf840f4221
- SHA512 6a12741a08c0fa1bca6b6fafeb56c9dbb42e7e11c409d33b3b75dea6ca2a99e6dfe03a94e7df95b01a5e643c0787475361b5bd0a17e87e7f39dd10280ca496ba
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Yw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+5KzV:wKyG
- TLSH T1D9376C51F5A08171D0BA8071C696A776FA727C415B308BCB9386EB2C2F376D09A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry