General
- Target 2026-07-08_f9c6d6a786a600c0436c50e18dc7fa67_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 58.5MB
- Sample260708-tvqbsact5p
- SHA256 57a84e7b5717fa5e7a05e40adac755615560fa5f1d48247367af03ceaedea967
- MD5 f9c6d6a786a600c0436c50e18dc7fa67
- SHA1 506c9959b4940ee9fe0c89b9ec43af0a3f1a7ded
- SHA512 a0b3fd07a4b3d3c449da17630b08ac3b64a72a319edaf2c882f6221dcaa57fe5f430b4480ad02a26933ef3367b9f517fbd658ca1d83b0aa9aa35e1ae20013d94
- SSDEEP 393216:2c7cSc7c9c7cSc7ckc7cSc7cbc7cSc7c9c7cSc7ckc7cSc7c:tYRY2YRY/YRY4YRY2YRY/YRY
- TLSH T1F4D78C17E69440F5D16E993087A69332FA73B8120B7197CB93A4C62D1F336D06E3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_f9c6d6a786a600c0436c50e18dc7fa67_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_f9c6d6a786a600c0436c50e18dc7fa67_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_f9c6d6a786a600c0436c50e18dc7fa67_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 58.5MB
- SHA256 57a84e7b5717fa5e7a05e40adac755615560fa5f1d48247367af03ceaedea967
- MD5 f9c6d6a786a600c0436c50e18dc7fa67
- SHA1 506c9959b4940ee9fe0c89b9ec43af0a3f1a7ded
- SHA512 a0b3fd07a4b3d3c449da17630b08ac3b64a72a319edaf2c882f6221dcaa57fe5f430b4480ad02a26933ef3367b9f517fbd658ca1d83b0aa9aa35e1ae20013d94
- SSDEEP 393216:2c7cSc7c9c7cSc7ckc7cSc7cbc7cSc7c9c7cSc7ckc7cSc7c:tYRY2YRY/YRY4YRY2YRY/YRY
- TLSH T1F4D78C17E69440F5D16E993087A69332FA73B8120B7197CB93A4C62D1F336D06E3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry