General
- Target 2026-07-10_7065957a76eb88bb64fa95f02f93a4b8_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 34.0MB
- Sample260710-yy3thagw4k
- SHA256 00906af0afe455824ff05f984c436feef8fb0300efa774845d49c14da6a7bd4e
- MD5 7065957a76eb88bb64fa95f02f93a4b8
- SHA1 0d8962c6cfdf8e82253313faaac081ee25fa5ff7
- SHA512 c30fa58201539384f8b4612ffaa20c86f0667271e11031f828837a6e09afb2ef02cb440cf4dbd483403bf2b18db2c7c7cc181d515f3752091f383c50bbd6974e
- SSDEEP 393216:IkLDkL5ovkLDkL5o/tkLDkL5ovkLDkL5o/pK:IkLDkLevkLDkLeVkLDkLevkLDkLe8
- TLSH T157779F03B6E501A9E07F863497669632EA72BC560F21D7CF5690F61E2E33BD09A35313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_7065957a76eb88bb64fa95f02f93a4b8_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_7065957a76eb88bb64fa95f02f93a4b8_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_7065957a76eb88bb64fa95f02f93a4b8_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 34.0MB
- SHA256 00906af0afe455824ff05f984c436feef8fb0300efa774845d49c14da6a7bd4e
- MD5 7065957a76eb88bb64fa95f02f93a4b8
- SHA1 0d8962c6cfdf8e82253313faaac081ee25fa5ff7
- SHA512 c30fa58201539384f8b4612ffaa20c86f0667271e11031f828837a6e09afb2ef02cb440cf4dbd483403bf2b18db2c7c7cc181d515f3752091f383c50bbd6974e
- SSDEEP 393216:IkLDkL5ovkLDkL5o/tkLDkL5ovkLDkL5o/pK:IkLDkLevkLDkLeVkLDkLevkLDkLe8
- TLSH T157779F03B6E501A9E07F863497669632EA72BC560F21D7CF5690F61E2E33BD09A35313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application