General
- Target 2026-07-10_42cf0e6446f075de95e7d5689207e991_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 60.8MB
- Sample260710-zd1zvabv21
- SHA256 b42b63314fb48b53e6d1c62af345ca8dd06222ddc318193f5b336185505d53f0
- MD5 42cf0e6446f075de95e7d5689207e991
- SHA1 9e8af0daacd2f8d2e34e258edab4af19b53d6467
- SHA512 0cd1b84e9be6b26a7a4340ab5fa9810b5422d21183c40fa4df6e8e9500081ab45801ad0cbaa65839a8c8993729a81f73970d9345ab7979223c13af4b1b7d6fe5
- SSDEEP 393216:2cD2cDIEU8IBJ0KDcD2cDIEU8IBJ0K3KDcD2cDIEU8IBJ0KDcD2cDIEU8IBJ0K3Q:tZMzXAZMzXaAZMzXAZMzXat
- TLSH T132E79D26B6E440E5D07A95348BA68332E7B2BC624B71C7CB4354F6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-10_42cf0e6446f075de95e7d5689207e991_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_42cf0e6446f075de95e7d5689207e991_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_42cf0e6446f075de95e7d5689207e991_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 60.8MB
- SHA256 b42b63314fb48b53e6d1c62af345ca8dd06222ddc318193f5b336185505d53f0
- MD5 42cf0e6446f075de95e7d5689207e991
- SHA1 9e8af0daacd2f8d2e34e258edab4af19b53d6467
- SHA512 0cd1b84e9be6b26a7a4340ab5fa9810b5422d21183c40fa4df6e8e9500081ab45801ad0cbaa65839a8c8993729a81f73970d9345ab7979223c13af4b1b7d6fe5
- SSDEEP 393216:2cD2cDIEU8IBJ0KDcD2cDIEU8IBJ0K3KDcD2cDIEU8IBJ0KDcD2cDIEU8IBJ0K3Q:tZMzXAZMzXaAZMzXAZMzXat
- TLSH T132E79D26B6E440E5D07A95348BA68332E7B2BC624B71C7CB4354F6191F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry