General
- Target 2026-07-13_741875178a2f775abd8ebdc6a166e5e7_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 10.2MB
- Sample260714-bkr4hsbz7m
- SHA256 5cd9e3d64c5b0d522c44b9c8cc21cdee04278d1d2cbbfb62f383d6b94a429fdc
- MD5 741875178a2f775abd8ebdc6a166e5e7
- SHA1 0f13f68149c279f2a4b29214be5f2a942dc23f99
- SHA512 3bc226dd2283ba4abd75e35a3afef2a3a609e1e0f3f62cffc0a267fd5c2f36b009638c2a1b441f7ee99a6a0ece7806f91e3446902d11bd78a986ae6572ec22a6
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Qw/h1+cw/h1+l:O
- TLSH T1FFB65AA1F5A08172D1B68471C5D6A77AFA337C411B308BC79386DB2C2F272D19A36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_741875178a2f775abd8ebdc6a166e5e7_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_741875178a2f775abd8ebdc6a166e5e7_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_741875178a2f775abd8ebdc6a166e5e7_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 10.2MB
- SHA256 5cd9e3d64c5b0d522c44b9c8cc21cdee04278d1d2cbbfb62f383d6b94a429fdc
- MD5 741875178a2f775abd8ebdc6a166e5e7
- SHA1 0f13f68149c279f2a4b29214be5f2a942dc23f99
- SHA512 3bc226dd2283ba4abd75e35a3afef2a3a609e1e0f3f62cffc0a267fd5c2f36b009638c2a1b441f7ee99a6a0ece7806f91e3446902d11bd78a986ae6572ec22a6
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Qw/h1+cw/h1+l:O
- TLSH T1FFB65AA1F5A08172D1B68471C5D6A77AFA337C411B308BC79386DB2C2F272D19A36736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry