General
- Target 2026-07-15_95606ca2e64a6fcb47cde387318fa457_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 61.2MB
- Sample260715-3l63lsf17l
- SHA256 92d183e9da965fb8ded83b63585a62f145219e54a129e0c747a473828fe363a9
- MD5 95606ca2e64a6fcb47cde387318fa457
- SHA1 14b31456e4c14a830f905efa10fb357e807270c1
- SHA512 691702bdea0266ef917a0b65a6c716a0f6b24afc88edc1d7cf9458f2984e4569389eca622e001bad674a0e00a2967b36475327cf9f0ca78178b636d2f09246e8
- SSDEEP 393216:2cDc3KR0oyGHvyEYKb7cDc3KR0oyGHvyEYKbiwhcDc3KR0oyGHvyEYKb7cDc3KRZ:tAaR9RPaAaR9RPbSAaR9RPaAaR9T
- TLSH T1B8E77C22B6E540E5D0AAD134CF668632E7B27C154FB097DB4250F29A2F33AD07E39716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_95606ca2e64a6fcb47cde387318fa457_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_95606ca2e64a6fcb47cde387318fa457_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_95606ca2e64a6fcb47cde387318fa457_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 61.2MB
- SHA256 92d183e9da965fb8ded83b63585a62f145219e54a129e0c747a473828fe363a9
- MD5 95606ca2e64a6fcb47cde387318fa457
- SHA1 14b31456e4c14a830f905efa10fb357e807270c1
- SHA512 691702bdea0266ef917a0b65a6c716a0f6b24afc88edc1d7cf9458f2984e4569389eca622e001bad674a0e00a2967b36475327cf9f0ca78178b636d2f09246e8
- SSDEEP 393216:2cDc3KR0oyGHvyEYKb7cDc3KR0oyGHvyEYKbiwhcDc3KR0oyGHvyEYKb7cDc3KRZ:tAaR9RPaAaR9RPbSAaR9RPaAaR9T
- TLSH T1B8E77C22B6E540E5D0AAD134CF668632E7B27C154FB097DB4250F29A2F33AD07E39716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry