General
- Target 2026-07-06_c4608b0b5c9ef63b76122be3b878b15d_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 9.8MB
- Sample260706-v9wb1sav3x
- SHA256 82e1070e6f595891feaa40e4cc070e2034dff461d687e5fe3a65d54af06ef132
- MD5 c4608b0b5c9ef63b76122be3b878b15d
- SHA1 52c467948009fef586efd4b09fdded745f4753bb
- SHA512 2cdc34b547a4adbb1728a9480e456c6441848fb84fc47f7f4f9a9a0a7f42daaee324a049059c7c90164867a4537721fbc09ddfacf27498039ff51c864bbe78da
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+Tu5x6M1c/h1+nu5x6M1c/h1+5j0oAaldmdmnp:Jw/h1+Qw/h1+cw/h1+Qw/h1+5gKmd0
- TLSH T10FA66C52F1A081B5D16A8070CA969675FA337C4507F186CB6285FBBC2F376C0BA76723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_c4608b0b5c9ef63b76122be3b878b15d_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_c4608b0b5c9ef63b76122be3b878b15d_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_c4608b0b5c9ef63b76122be3b878b15d_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 9.8MB
- SHA256 82e1070e6f595891feaa40e4cc070e2034dff461d687e5fe3a65d54af06ef132
- MD5 c4608b0b5c9ef63b76122be3b878b15d
- SHA1 52c467948009fef586efd4b09fdded745f4753bb
- SHA512 2cdc34b547a4adbb1728a9480e456c6441848fb84fc47f7f4f9a9a0a7f42daaee324a049059c7c90164867a4537721fbc09ddfacf27498039ff51c864bbe78da
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+Tu5x6M1c/h1+nu5x6M1c/h1+5j0oAaldmdmnp:Jw/h1+Qw/h1+cw/h1+Qw/h1+5gKmd0
- TLSH T10FA66C52F1A081B5D16A8070CA969675FA337C4507F186CB6285FBBC2F376C0BA76723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry