General
- Target 2026-07-12_27467abbc716474c789d877aa8a21d94_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 32.9MB
- Sample260712-q9gfmsa17l
- SHA256 37d648263e57bbdec242a5a138022fc6fc0bbbffc764d52857faf843eb610438
- MD5 27467abbc716474c789d877aa8a21d94
- SHA1 be6005409019cbc7f89144557dc1d111b8eec8cb
- SHA512 249a39fc29b0bac210473c712fb5e633f76ee458ab9094345d1245bbbc66ee72af6c56f3e5ea7e2fcbc94fa28c5fdcc9397e57017eef0f0e1ee878a2243b0949
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+cw/h1+Qw/h1+Kdw/h1+Qw/h1+cw5:UISvyEYKbi
- TLSH T146774A51F6A481B1D07A8070C6A6A77AFA3378411B708BC75386DB3D2F372D19A76723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_27467abbc716474c789d877aa8a21d94_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_27467abbc716474c789d877aa8a21d94_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_27467abbc716474c789d877aa8a21d94_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 32.9MB
- SHA256 37d648263e57bbdec242a5a138022fc6fc0bbbffc764d52857faf843eb610438
- MD5 27467abbc716474c789d877aa8a21d94
- SHA1 be6005409019cbc7f89144557dc1d111b8eec8cb
- SHA512 249a39fc29b0bac210473c712fb5e633f76ee458ab9094345d1245bbbc66ee72af6c56f3e5ea7e2fcbc94fa28c5fdcc9397e57017eef0f0e1ee878a2243b0949
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+cw/h1+Qw/h1+Kdw/h1+Qw/h1+cw5:UISvyEYKbi
- TLSH T146774A51F6A481B1D07A8070C6A6A77AFA3378411B708BC75386DB3D2F372D19A76723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Drops file in Drivers directory
Adds Run key to start application