General
- Target 2026-07-15_d36d6fa39dde32a3bc71d5c16716416e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 41.1MB
- Sample260715-28nn4sa19t
- SHA256 c798de0d18d57a6526fed422605ce082205e62c28a5e4e8e2f2f9659a5159954
- MD5 d36d6fa39dde32a3bc71d5c16716416e
- SHA1 b0947e3f85612393d068828894148ce0b6d2af4d
- SHA512 86fa73f958e03b42f013af7ddf8c2a745d59c3394c07780d0be2a5b57e36160db72838b13115f118269708eed1c8b44df2d861ab3ffc4d34437e4cbeb42ff4f3
- SSDEEP 393216:2cDc3KR0oyGHvyEYKb7cDc3KR0oyGHvyEYKbiwhcDc3Ka:tAaR9RPaAaR9RPbSAaa
- TLSH T13A978C22B6E540E5D0AAD1348B668632E7B27C114FB0D7DF4250F65E2F336D06E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_d36d6fa39dde32a3bc71d5c16716416e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_d36d6fa39dde32a3bc71d5c16716416e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_d36d6fa39dde32a3bc71d5c16716416e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 41.1MB
- SHA256 c798de0d18d57a6526fed422605ce082205e62c28a5e4e8e2f2f9659a5159954
- MD5 d36d6fa39dde32a3bc71d5c16716416e
- SHA1 b0947e3f85612393d068828894148ce0b6d2af4d
- SHA512 86fa73f958e03b42f013af7ddf8c2a745d59c3394c07780d0be2a5b57e36160db72838b13115f118269708eed1c8b44df2d861ab3ffc4d34437e4cbeb42ff4f3
- SSDEEP 393216:2cDc3KR0oyGHvyEYKb7cDc3KR0oyGHvyEYKbiwhcDc3Ka:tAaR9RPaAaR9RPbSAaa
- TLSH T13A978C22B6E540E5D0AAD1348B668632E7B27C114FB0D7DF4250F65E2F336D06E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application