General
- Target 2026-07-06_ca603ccab1e28d877ff0eecd2c7e35ba_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_remcos_smoke-loader_vidar
- Size 4.3MB
- Sample260706-r7nbvact8q
- SHA256 bb875210aca4b6763f86925cb31490e2c4bb93c98811ece124f7537e952a9422
- MD5 ca603ccab1e28d877ff0eecd2c7e35ba
- SHA1 80542fe7b62821bab79341df9db5d749bf732238
- SHA512 61ba4eac087138930ee9b81bd14d386e1cb58bc4c80c1a197e74af22898c50c1cf5cb63fc033a6401c771218a329ca507efbee6476aa63b1d5da9c2f2def20b3
- SSDEEP 98304:Uu5x6M1IezSC6v2XMHcu5x6M1IezSC6v2XMHm:nDyDJ
- TLSH T16E265B26F978C273D1B694B5C5D6A779FA3234420B308AC78345C76C2E236D19E3673A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_ca603ccab1e28d877ff0eecd2c7e35ba_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_ca603ccab1e28d877ff0eecd2c7e35ba_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_ca603ccab1e28d877ff0eecd2c7e35ba_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_remcos_smoke-loader_vidar
- Size 4.3MB
- SHA256 bb875210aca4b6763f86925cb31490e2c4bb93c98811ece124f7537e952a9422
- MD5 ca603ccab1e28d877ff0eecd2c7e35ba
- SHA1 80542fe7b62821bab79341df9db5d749bf732238
- SHA512 61ba4eac087138930ee9b81bd14d386e1cb58bc4c80c1a197e74af22898c50c1cf5cb63fc033a6401c771218a329ca507efbee6476aa63b1d5da9c2f2def20b3
- SSDEEP 98304:Uu5x6M1IezSC6v2XMHcu5x6M1IezSC6v2XMHm:nDyDJ
- TLSH T16E265B26F978C273D1B694B5C5D6A779FA3234420B308AC78345C76C2E236D19E3673A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry