General
- Target 2026-07-13_8de43866db19962e341f61bc9ed1fa77_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 11.7MB
- Sample260714-bcyw4aby2q
- SHA256 67152d55e64e9d38e942bef6ebdf47deeb63d0550639e0c019d680a26d557217
- MD5 8de43866db19962e341f61bc9ed1fa77
- SHA1 3c33ba5fee6962bcab0b77b57874854b01aadf82
- SHA512 55d851687569980ec6e7a93b1479c10020660271b71eaf1aad4fe98ecbdc336123e6e00ae2128f6942aabc1931835acb55be0d6a70bd1cf2cb30075d2d98c1d8
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Qw/h1+cw/h1+joK:+o
- TLSH T136C65B52F5A081B5D0768471C6D6A77AEA327C411B308BCB5386FB2C2F376D19A36732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_8de43866db19962e341f61bc9ed1fa77_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_8de43866db19962e341f61bc9ed1fa77_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_8de43866db19962e341f61bc9ed1fa77_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 11.7MB
- SHA256 67152d55e64e9d38e942bef6ebdf47deeb63d0550639e0c019d680a26d557217
- MD5 8de43866db19962e341f61bc9ed1fa77
- SHA1 3c33ba5fee6962bcab0b77b57874854b01aadf82
- SHA512 55d851687569980ec6e7a93b1479c10020660271b71eaf1aad4fe98ecbdc336123e6e00ae2128f6942aabc1931835acb55be0d6a70bd1cf2cb30075d2d98c1d8
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Qw/h1+cw/h1+joK:+o
- TLSH T136C65B52F5A081B5D0768471C6D6A77AEA327C411B308BCB5386FB2C2F376D19A36732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry