General
- Target 2026-07-11_dfb723a22217ec0325ed6e960b4b1897_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 60.8MB
- Sample260711-wpvenagt3m
- SHA256 1186c2ae32d4b31507db763ce615f1798831a084f4bfeb752b33fe5a169dfd78
- MD5 dfb723a22217ec0325ed6e960b4b1897
- SHA1 84b566055b6309ae84a350b914bbf148293769cd
- SHA512 94f97a390f6bcffe8292d833c941fbe19c1a54e83a6945a826b5e5db60fd6219d121755fd0d6efd5344fa0962c12f3d3f000cacabc214977fbdd4cba7ad933b3
- SSDEEP 393216:2cD2cDtcD2cD7cD2cDtcD2cD8lucD2cDtcD2cD7cDH:tZ6ZcZ6ZwllZ6Zcb
- TLSH T156E7AE17F69444F5D17A99304A669332EB72BC120B3197CB83A4F6191F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_dfb723a22217ec0325ed6e960b4b1897_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_dfb723a22217ec0325ed6e960b4b1897_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_dfb723a22217ec0325ed6e960b4b1897_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 60.8MB
- SHA256 1186c2ae32d4b31507db763ce615f1798831a084f4bfeb752b33fe5a169dfd78
- MD5 dfb723a22217ec0325ed6e960b4b1897
- SHA1 84b566055b6309ae84a350b914bbf148293769cd
- SHA512 94f97a390f6bcffe8292d833c941fbe19c1a54e83a6945a826b5e5db60fd6219d121755fd0d6efd5344fa0962c12f3d3f000cacabc214977fbdd4cba7ad933b3
- SSDEEP 393216:2cD2cDtcD2cD7cD2cDtcD2cD8lucD2cDtcD2cD7cDH:tZ6ZcZ6ZwllZ6Zcb
- TLSH T156E7AE17F69444F5D17A99304A669332EB72BC120B3197CB83A4F6191F336D0AF3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry