General
- Target 2026-07-08_245a345da978ca54622bf8d42d46f53b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 57.9MB
- Sample260708-w4babsez3m
- SHA256 be056fb4416a23739edc8afa3f086290b40141b03b68acb0d2c23cd8d1c12a2e
- MD5 245a345da978ca54622bf8d42d46f53b
- SHA1 8a6de59651f352fe2c1c27152a1dc1349f377015
- SHA512 836154b5a4d9b774eacdfbffa394dac8fa9ffd78e890432dabbdf37768bebb1eaa9c3e6d44c810b3896ba400685a99d974364fe061e729b18999e248e05872c8
- SSDEEP 393216:2c7cSc7c9c7cSc7ckc7cSc7cbc7cSc7c9c7cSc7ckc7cSc7cf:tYRY2YRY/YRY4YRY2YRY/YRYf
- TLSH T10FD78C17E69440F5D16E993087A69332FA73B8120B7197CB93A4C62D1F336D06E3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_245a345da978ca54622bf8d42d46f53b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_245a345da978ca54622bf8d42d46f53b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_245a345da978ca54622bf8d42d46f53b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 57.9MB
- SHA256 be056fb4416a23739edc8afa3f086290b40141b03b68acb0d2c23cd8d1c12a2e
- MD5 245a345da978ca54622bf8d42d46f53b
- SHA1 8a6de59651f352fe2c1c27152a1dc1349f377015
- SHA512 836154b5a4d9b774eacdfbffa394dac8fa9ffd78e890432dabbdf37768bebb1eaa9c3e6d44c810b3896ba400685a99d974364fe061e729b18999e248e05872c8
- SSDEEP 393216:2c7cSc7c9c7cSc7ckc7cSc7cbc7cSc7c9c7cSc7ckc7cSc7cf:tYRY2YRY/YRY4YRY2YRY/YRYf
- TLSH T10FD78C17E69440F5D16E993087A69332FA73B8120B7197CB93A4C62D1F336D06E3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry