General
- Target 2026-07-06_b5bea6f6bbc2ba233d88ef9f58ea07e5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 19.9MB
- Sample260707-btj49sfs7s
- SHA256 b9da834d9fcf29d87bf1b23b17f11ea76a7d4e5ab24e2b9cf163fb4f47420d76
- MD5 b5bea6f6bbc2ba233d88ef9f58ea07e5
- SHA1 e95daaeaa0a19166ca9f871b7a6e22c2cb711350
- SHA512 41cd55aeadf86b915f651bf061a7096d91034d660a427168202f2734c981ca1fc422ad0126533d59649a0074d11a0a7c2d6b375bddf837bef4262858670d8223
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Yw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+5Kzg:wK
- TLSH T11D275B61F5A08171D07A8071C6D6A77AEA727C415B308BC79386EB2C2F372D19A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_b5bea6f6bbc2ba233d88ef9f58ea07e5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_b5bea6f6bbc2ba233d88ef9f58ea07e5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_b5bea6f6bbc2ba233d88ef9f58ea07e5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 19.9MB
- SHA256 b9da834d9fcf29d87bf1b23b17f11ea76a7d4e5ab24e2b9cf163fb4f47420d76
- MD5 b5bea6f6bbc2ba233d88ef9f58ea07e5
- SHA1 e95daaeaa0a19166ca9f871b7a6e22c2cb711350
- SHA512 41cd55aeadf86b915f651bf061a7096d91034d660a427168202f2734c981ca1fc422ad0126533d59649a0074d11a0a7c2d6b375bddf837bef4262858670d8223
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Yw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+5Kzg:wK
- TLSH T11D275B61F5A08171D07A8071C6D6A77AEA727C415B308BC79386EB2C2F372D19A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry