General
- Target 2026-07-06_ad2a822c6792ed0bebc0aac84c8cbc84_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 14.6MB
- Sample260706-y52vsahs2l
- SHA256 b29ab9729fecaf135918ff14417781b2e73914fa93283d4b96d36871155b1996
- MD5 ad2a822c6792ed0bebc0aac84c8cbc84
- SHA1 35ad20859161f5d946f9d865146e16b546cdfccd
- SHA512 2ffba0dd62592f05813ffb28d20792e2d7dd26e8d54500a8d371e83c69e4ba3f4e99fe7d68f1837b73f5b3ed2299d7d14d6020599accc4afac80c123b7ca378e
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68Vb48Vb618U68Vbb+:2cD2cD/cD
- TLSH T1B3F69F17F6A440F5D17A987086A69736EB727C120B309BCB8354F61D2F336D09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_ad2a822c6792ed0bebc0aac84c8cbc84_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_ad2a822c6792ed0bebc0aac84c8cbc84_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_ad2a822c6792ed0bebc0aac84c8cbc84_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 14.6MB
- SHA256 b29ab9729fecaf135918ff14417781b2e73914fa93283d4b96d36871155b1996
- MD5 ad2a822c6792ed0bebc0aac84c8cbc84
- SHA1 35ad20859161f5d946f9d865146e16b546cdfccd
- SHA512 2ffba0dd62592f05813ffb28d20792e2d7dd26e8d54500a8d371e83c69e4ba3f4e99fe7d68f1837b73f5b3ed2299d7d14d6020599accc4afac80c123b7ca378e
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68Vb48Vb618U68Vbb+:2cD2cD/cD
- TLSH T1B3F69F17F6A440F5D17A987086A69736EB727C120B309BCB8354F61D2F336D09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry