General
- Target 2026-07-13_ba314e55f63b18a9e2081b7345104fe3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 63.1MB
- Sample260714-a3dheabw2r
- SHA256 61973e2f7cd6f06995186562148931968c525426fed81f512059a194a5b4e345
- MD5 ba314e55f63b18a9e2081b7345104fe3
- SHA1 946cfea71774dd4f2d9fd0b2ecd449cda84e34ec
- SHA512 a5f4fc5ea1fa1292f2503e4f24251308ee0784486b3a966405e35aaeca9edaecf00379944635c43c9fb5719758324f12e24b79d1506420cf5f6da2936324daa9
- SSDEEP 393216:2cDcy7cDcyRcDcy7cDcyAcDcy7cDcyRcDcy7cDcyOK+:tAyYAyiAyYAyDAyYAyiAyYAyp+
- TLSH T106E78C17F6A841F5D07AD4748A969636EA727C520B309ACF4390F3192F33AD09F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_ba314e55f63b18a9e2081b7345104fe3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_ba314e55f63b18a9e2081b7345104fe3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_ba314e55f63b18a9e2081b7345104fe3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 63.1MB
- SHA256 61973e2f7cd6f06995186562148931968c525426fed81f512059a194a5b4e345
- MD5 ba314e55f63b18a9e2081b7345104fe3
- SHA1 946cfea71774dd4f2d9fd0b2ecd449cda84e34ec
- SHA512 a5f4fc5ea1fa1292f2503e4f24251308ee0784486b3a966405e35aaeca9edaecf00379944635c43c9fb5719758324f12e24b79d1506420cf5f6da2936324daa9
- SSDEEP 393216:2cDcy7cDcyRcDcy7cDcyAcDcy7cDcyRcDcy7cDcyOK+:tAyYAyiAyYAyDAyYAyiAyYAyp+
- TLSH T106E78C17F6A841F5D07AD4748A969636EA727C520B309ACF4390F3192F33AD09F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry