General
- Target 2026-07-06_cfedc2e19becfb87538b5a3c8dd1af9b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 17.8MB
- Sample260706-r6948act7q
- SHA256 ce228963d85dbb01a259775811e7f9f55a48b3a6bcc12c886c1a758acb356f1c
- MD5 cfedc2e19becfb87538b5a3c8dd1af9b
- SHA1 2cc209a82886eae8f7038dfa047e16c7fc1a56c5
- SHA512 a90a33cefcaf1eb8b7e106ac98886b0bd9d52051f0910ef7cd9ced1b6cf5bccab3f3c7ce5a7e439fac7de1034184d3c296a146279a1a39705aeaa6c8bbe0d2f9
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68Vb48Vb618U68VbbpvyEYc/b3w8O:2cD2cD/cDzvyEYKbi
- TLSH T10A179E16BBA440F5E17A953089669732EB72BC120B31DBCB4394F61D2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_cfedc2e19becfb87538b5a3c8dd1af9b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_cfedc2e19becfb87538b5a3c8dd1af9b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260630-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_cfedc2e19becfb87538b5a3c8dd1af9b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 17.8MB
- SHA256 ce228963d85dbb01a259775811e7f9f55a48b3a6bcc12c886c1a758acb356f1c
- MD5 cfedc2e19becfb87538b5a3c8dd1af9b
- SHA1 2cc209a82886eae8f7038dfa047e16c7fc1a56c5
- SHA512 a90a33cefcaf1eb8b7e106ac98886b0bd9d52051f0910ef7cd9ced1b6cf5bccab3f3c7ce5a7e439fac7de1034184d3c296a146279a1a39705aeaa6c8bbe0d2f9
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68Vb48Vb618U68VbbpvyEYc/b3w8O:2cD2cD/cDzvyEYKbi
- TLSH T10A179E16BBA440F5E17A953089669732EB72BC120B31DBCB4394F61D2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry