General
- Target 2026-07-08_5d2985631ab43895e65d8aaa55b00078_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 9.4MB
- Sample260708-2dkzqsaz2y
- SHA256 40642b1c46f59e3b4ed5a047f7d26458d8f0fa14b26673f027630cd79c282609
- MD5 5d2985631ab43895e65d8aaa55b00078
- SHA1 cafb6423ea481d3290a7cc7153de8cfe583feedb
- SHA512 63a382de56d2b99f7a69d6bad01a3484457de5dc691d17afc9d192b88941dd2d6b2f50c8da62723013b7611b62e673385660e29fdaaed800c2cef61082a068a3
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+bC/h1+mcI9:Cb8
- TLSH T1F8A65B61F1A08171D16A8071CB96A775EA727C414BF087C7A285F7AC2F376C0BA36727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_5d2985631ab43895e65d8aaa55b00078_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_5d2985631ab43895e65d8aaa55b00078_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_5d2985631ab43895e65d8aaa55b00078_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 9.4MB
- SHA256 40642b1c46f59e3b4ed5a047f7d26458d8f0fa14b26673f027630cd79c282609
- MD5 5d2985631ab43895e65d8aaa55b00078
- SHA1 cafb6423ea481d3290a7cc7153de8cfe583feedb
- SHA512 63a382de56d2b99f7a69d6bad01a3484457de5dc691d17afc9d192b88941dd2d6b2f50c8da62723013b7611b62e673385660e29fdaaed800c2cef61082a068a3
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+bC/h1+mcI9:Cb8
- TLSH T1F8A65B61F1A08171D16A8071CB96A775EA727C414BF087C7A285F7AC2F376C0BA36727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry