General
- Target 2026-07-13_bcc1c18b80a707b117e475f67383739c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 10.3MB
- Sample260714-a2ap5adx4s
- SHA256 2fda9b5cff86d7def79e13412ba13eeb3263f515b4697d0c19d4cea27518840d
- MD5 bcc1c18b80a707b117e475f67383739c
- SHA1 a44411a8324873f17bd500938220b0529b29c78a
- SHA512 19ce265f84066820aaa7d7bc4b55046a22f7f23db27512d4b148af5cda45f0afc2e0694cc5926f37383aea3d5f6d1b4cad45d3d16fe8761fd6eebdc22191e565
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Qw/h1+cw/h1+Z:2
- TLSH T1A9B64991F5A08172D07A8471C6D6A77AFA3378411B608BC79386DB3C2F272D19A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_bcc1c18b80a707b117e475f67383739c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_bcc1c18b80a707b117e475f67383739c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_bcc1c18b80a707b117e475f67383739c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 10.3MB
- SHA256 2fda9b5cff86d7def79e13412ba13eeb3263f515b4697d0c19d4cea27518840d
- MD5 bcc1c18b80a707b117e475f67383739c
- SHA1 a44411a8324873f17bd500938220b0529b29c78a
- SHA512 19ce265f84066820aaa7d7bc4b55046a22f7f23db27512d4b148af5cda45f0afc2e0694cc5926f37383aea3d5f6d1b4cad45d3d16fe8761fd6eebdc22191e565
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Qw/h1+cw/h1+Z:2
- TLSH T1A9B64991F5A08172D07A8471C6D6A77AFA3378411B608BC79386DB3C2F272D19A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry