General
- Target 2026-07-09_57a029c4784604563020b6c2b6ea833f_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 28.1MB
- Sample260709-khwhlaft3n
- SHA256 114b21c751ca68076b3a48c4670a6b69928ad3aa46f641d0943fb0b7132073b0
- MD5 57a029c4784604563020b6c2b6ea833f
- SHA1 02df95d93fe385e66e04f43907833ea5d9dd7fdf
- SHA512 baa105ff1b2e137e32f6f9a78712ebd8899759f25ce687a0c2cb7ddc140ca5adfd1bf28c516fb1148f5d4d352bf06e200b6a6194ced552596acd62c1cee1031f
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68Vb48Vb618U68Vbb28Vb618U68Vbb8Vb618U68Vb48:2cD2cD/cDBcD2cD/cD
- TLSH T12057AE17F69440F5D17A993086A69336EB32BC110B31D7CB93A4F6191F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_57a029c4784604563020b6c2b6ea833f_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_57a029c4784604563020b6c2b6ea833f_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_57a029c4784604563020b6c2b6ea833f_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 28.1MB
- SHA256 114b21c751ca68076b3a48c4670a6b69928ad3aa46f641d0943fb0b7132073b0
- MD5 57a029c4784604563020b6c2b6ea833f
- SHA1 02df95d93fe385e66e04f43907833ea5d9dd7fdf
- SHA512 baa105ff1b2e137e32f6f9a78712ebd8899759f25ce687a0c2cb7ddc140ca5adfd1bf28c516fb1148f5d4d352bf06e200b6a6194ced552596acd62c1cee1031f
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68Vb48Vb618U68Vbb28Vb618U68Vbb8Vb618U68Vb48:2cD2cD/cDBcD2cD/cD
- TLSH T12057AE17F69440F5D17A993086A69336EB32BC110B31D7CB93A4F6191F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application