General
- Target 2026-07-13_bb4586082a02b43b3188704feb3db6ae_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 4.1MB
- Sample260714-a2x6esdx5s
- SHA256 27ff01451bcde56473077c7dcf5d0236b79a09c5da9584eea472708a98847d8a
- MD5 bb4586082a02b43b3188704feb3db6ae
- SHA1 17cced939881d1dcac574fbc959cca81e840b595
- SHA512 8dd9d5d2c2466c1985aa7aed265ef561121282fc12b28787c1a36ed620c9e32d6899786c8b6d393e0995b7e1f7bd9f7cc117567bbd3527b316e42538a13b643c
- SSDEEP 49152:tYRw5x6M1HVO88hXl+tGbqVXLdwAwIPCwQ/gyp0vEJOQc9lju:Su5x6M1c/h1+tZzPBN6
- TLSH T126169D13F2A581F5C06AC475879AA233FA72BC451B30A6CF0791F7591E37AD09B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_bb4586082a02b43b3188704feb3db6ae_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_bb4586082a02b43b3188704feb3db6ae_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_bb4586082a02b43b3188704feb3db6ae_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 4.1MB
- SHA256 27ff01451bcde56473077c7dcf5d0236b79a09c5da9584eea472708a98847d8a
- MD5 bb4586082a02b43b3188704feb3db6ae
- SHA1 17cced939881d1dcac574fbc959cca81e840b595
- SHA512 8dd9d5d2c2466c1985aa7aed265ef561121282fc12b28787c1a36ed620c9e32d6899786c8b6d393e0995b7e1f7bd9f7cc117567bbd3527b316e42538a13b643c
- SSDEEP 49152:tYRw5x6M1HVO88hXl+tGbqVXLdwAwIPCwQ/gyp0vEJOQc9lju:Su5x6M1c/h1+tZzPBN6
- TLSH T126169D13F2A581F5C06AC475879AA233FA72BC451B30A6CF0791F7591E37AD09B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry