General
- Target 2026-07-07_58c08dec682eb5b1cd7fcaf96b028cc0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 31.5MB
- Sample260707-29dkjagw3l
- SHA256 f977524fe7f827f1c45c8bbc4649ed3226d6c1b6faaab468f5c7198bd722249b
- MD5 58c08dec682eb5b1cd7fcaf96b028cc0
- SHA1 c594ac8794341ee29201265dedec6e64f8633f6c
- SHA512 e1dac352613d43344fa79b756f3b14ad78c2463978dde41486a845a571b9ca8ae6c92d3d771bee293216b5451267e9877b166ee9615d46cfb29af6ff7e623eeb
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Qw/h1+cw/h1+Qw/h1+4oKLw/h1+Qw/h1+/:qodo
- TLSH T1C9774A52F5A081B1D07A8471C696A77AFA337C411B308AC75386FB3C2F376D19A36726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_58c08dec682eb5b1cd7fcaf96b028cc0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_58c08dec682eb5b1cd7fcaf96b028cc0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_58c08dec682eb5b1cd7fcaf96b028cc0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 31.5MB
- SHA256 f977524fe7f827f1c45c8bbc4649ed3226d6c1b6faaab468f5c7198bd722249b
- MD5 58c08dec682eb5b1cd7fcaf96b028cc0
- SHA1 c594ac8794341ee29201265dedec6e64f8633f6c
- SHA512 e1dac352613d43344fa79b756f3b14ad78c2463978dde41486a845a571b9ca8ae6c92d3d771bee293216b5451267e9877b166ee9615d46cfb29af6ff7e623eeb
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Qw/h1+cw/h1+Qw/h1+4oKLw/h1+Qw/h1+/:qodo
- TLSH T1C9774A52F5A081B1D07A8471C696A77AFA337C411B308AC75386FB3C2F376D19A36726
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry