General
- Target 2026-07-10_4c596c8997cddfea0c645100aab7cbc9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 17.0MB
- Sample260710-wmax8sgx2z
- SHA256 3abb44d3af06f2bdeaa087eb9eb46e826525fabb7545308d87c58289da01f6f3
- MD5 4c596c8997cddfea0c645100aab7cbc9
- SHA1 e00facdaca58aed290b88956c28f35e966eb529c
- SHA512 e0ed08525a55e34e0784dc4c5ffc693b477ad02bde6a76f0492669d8bc2040b7a3763fab0a78c15e6a9eb2f9a7d87e115244c44ad847b96b8a631e4a5e858d42
- SSDEEP 196608:Qi8kLri8kL5oKmi8kLri8kL5oKymcB/h1+:IkLDkL5ovkLDkL5o/
- TLSH T1D4079F03B6E441B9E07F853496669632EA72BC460B21D7CF5794F61E2E33BD09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_4c596c8997cddfea0c645100aab7cbc9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_4c596c8997cddfea0c645100aab7cbc9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_4c596c8997cddfea0c645100aab7cbc9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 17.0MB
- SHA256 3abb44d3af06f2bdeaa087eb9eb46e826525fabb7545308d87c58289da01f6f3
- MD5 4c596c8997cddfea0c645100aab7cbc9
- SHA1 e00facdaca58aed290b88956c28f35e966eb529c
- SHA512 e0ed08525a55e34e0784dc4c5ffc693b477ad02bde6a76f0492669d8bc2040b7a3763fab0a78c15e6a9eb2f9a7d87e115244c44ad847b96b8a631e4a5e858d42
- SSDEEP 196608:Qi8kLri8kL5oKmi8kLri8kL5oKymcB/h1+:IkLDkL5ovkLDkL5o/
- TLSH T1D4079F03B6E441B9E07F853496669632EA72BC460B21D7CF5794F61E2E33BD09A35323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry