General
- Target 2026-07-15_f23f2067c39c560eec53307c7fa906c3_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 8.0MB
- Sample260715-enqlmsbs4m
- SHA256 1dd20a4e789d9b659349d545bd6fe241688a1634158a54b687566fc82faa81c2
- MD5 f23f2067c39c560eec53307c7fa906c3
- SHA1 1be63b5a9f79cecdc9d0d9c82889695682805250
- SHA512 6c94067fa5fa431d7edceaca58323b358f932dd50256432910b7b426e25abd2bab07dfb3a32116ce5650f476163b7489ec9953dfbc61cf1a6e5f457fe0a80609
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+C2eQzGgHIKgMW:Qi8kL3Hxz7/h1+CrQboKc
- TLSH T10A868E13F6E441A9E07BC534D6669532EA72BC460B30D6CF1298B61D1F73BD09B3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-15_f23f2067c39c560eec53307c7fa906c3_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_f23f2067c39c560eec53307c7fa906c3_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_f23f2067c39c560eec53307c7fa906c3_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 8.0MB
- SHA256 1dd20a4e789d9b659349d545bd6fe241688a1634158a54b687566fc82faa81c2
- MD5 f23f2067c39c560eec53307c7fa906c3
- SHA1 1be63b5a9f79cecdc9d0d9c82889695682805250
- SHA512 6c94067fa5fa431d7edceaca58323b358f932dd50256432910b7b426e25abd2bab07dfb3a32116ce5650f476163b7489ec9953dfbc61cf1a6e5f457fe0a80609
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLn/h1+C2eQzGgHIKgMW:Qi8kL3Hxz7/h1+CrQboKc
- TLSH T10A868E13F6E441A9E07BC534D6669532EA72BC460B30D6CF1298B61D1F73BD09B3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry