General
- Target 2026-07-16_7ff9d9166f8da42efc66327625f1adc3_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 14.8MB
- Sample260716-nq66vaby6p
- SHA256 34af7e09341becb6cfbdef9101fb0ca2b8af36624a28758917130524e3605832
- MD5 7ff9d9166f8da42efc66327625f1adc3
- SHA1 69f61646876c4dbb6a6e6b99f85222ad6c388d6b
- SHA512 de1cfee85af06ab746a735491d11855b9bf6815d8f5c601a44ed32cd19a4b1299606231a14fed4924909987ee091c198ac4348f7ac55682d40dbdb487248f4a8
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzq:2cD2cDIEU8IBJ
- TLSH T1C1F69D16F6A440F5D1BB85748AA69236EB72BC120B3187CF4364F65D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-16_7ff9d9166f8da42efc66327625f1adc3_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_7ff9d9166f8da42efc66327625f1adc3_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_7ff9d9166f8da42efc66327625f1adc3_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 14.8MB
- SHA256 34af7e09341becb6cfbdef9101fb0ca2b8af36624a28758917130524e3605832
- MD5 7ff9d9166f8da42efc66327625f1adc3
- SHA1 69f61646876c4dbb6a6e6b99f85222ad6c388d6b
- SHA512 de1cfee85af06ab746a735491d11855b9bf6815d8f5c601a44ed32cd19a4b1299606231a14fed4924909987ee091c198ac4348f7ac55682d40dbdb487248f4a8
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzq:2cD2cDIEU8IBJ
- TLSH T1C1F69D16F6A440F5D1BB85748AA69236EB72BC120B3187CF4364F65D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry