General
- Target 2026-07-12_5f91cb0e88f92a3473d87be24127e373_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 12.2MB
- Sample260712-qar34act2y
- SHA256 35ee57404fffa463c05f52140d85c2768cc9603e8fe12ce33a33373bdc1d3bc0
- MD5 5f91cb0e88f92a3473d87be24127e373
- SHA1 b6defab2f92194c1d201cb0fc6e4d4553200f46d
- SHA512 524bed2b2e7ed625c6f2a9bb9b9175d06d634c79c0b2c38a116aaee47d4d17272a11edfc8f04348d0efa19ec3396cc00da9073858b9b2ad47697f2f04345c56d
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTDu5x6M1WoDDklJ6qqUHxB:Qi8kL3HxzOGhi8kL3HxzOG9
- TLSH T100D69F03F6E500ADD16BC234D6259632EA72BC461720DADF6698F65A1F33BD05F36322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-12_5f91cb0e88f92a3473d87be24127e373_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_5f91cb0e88f92a3473d87be24127e373_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_5f91cb0e88f92a3473d87be24127e373_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 12.2MB
- SHA256 35ee57404fffa463c05f52140d85c2768cc9603e8fe12ce33a33373bdc1d3bc0
- MD5 5f91cb0e88f92a3473d87be24127e373
- SHA1 b6defab2f92194c1d201cb0fc6e4d4553200f46d
- SHA512 524bed2b2e7ed625c6f2a9bb9b9175d06d634c79c0b2c38a116aaee47d4d17272a11edfc8f04348d0efa19ec3396cc00da9073858b9b2ad47697f2f04345c56d
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTDu5x6M1WoDDklJ6qqUHxB:Qi8kL3HxzOGhi8kL3HxzOG9
- TLSH T100D69F03F6E500ADD16BC234D6259632EA72BC461720DADF6698F65A1F33BD05F36322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry