General
- Target 2026-07-07_5ee4137b20e0fc8dbb54fc877bd2d3e1_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 13.7MB
- Sample260707-wtmklsb17l
- SHA256 4573919351a9f98484935875d148b985ed7a2c44210a78e4bdb5edd49c2f5c29
- MD5 5ee4137b20e0fc8dbb54fc877bd2d3e1
- SHA1 ef664ac4b124fa53e68b42cb5d2ef0f720d638dd
- SHA512 833c3dde7f757d6de5705964bb8e9e53b86b89ec2033124ea95b28a6618e5f77cd7d918405c2fb5321604569497d1b9ac79b7c0e0c4cfefdd3bd8d5703c94025
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+79w/h1+Qw/h1+8w/h1+Qw/h1+7i:qGi
- TLSH T1BEE67CA6F5A0C1B2D172C475C4D6A77AEA327C411B308BC79346DB2C2E272D19E36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_5ee4137b20e0fc8dbb54fc877bd2d3e1_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_5ee4137b20e0fc8dbb54fc877bd2d3e1_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_5ee4137b20e0fc8dbb54fc877bd2d3e1_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 13.7MB
- SHA256 4573919351a9f98484935875d148b985ed7a2c44210a78e4bdb5edd49c2f5c29
- MD5 5ee4137b20e0fc8dbb54fc877bd2d3e1
- SHA1 ef664ac4b124fa53e68b42cb5d2ef0f720d638dd
- SHA512 833c3dde7f757d6de5705964bb8e9e53b86b89ec2033124ea95b28a6618e5f77cd7d918405c2fb5321604569497d1b9ac79b7c0e0c4cfefdd3bd8d5703c94025
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+79w/h1+Qw/h1+8w/h1+Qw/h1+7i:qGi
- TLSH T1BEE67CA6F5A0C1B2D172C475C4D6A77AEA327C411B308BC79346DB2C2E272D19E36736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry