General
- Target 2026-07-18_2aaabd64be8fa7a73a9f91223dd97df4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 21.0MB
- Sample260718-kep7eag191
- SHA256 445628f43709606a6e0d24f49859b5a4617a19f1189c65948d9c18179c1e9c97
- MD5 2aaabd64be8fa7a73a9f91223dd97df4
- SHA1 a93e1f42ee185f98d436570c7e2c83493dfc5481
- SHA512 3c1639c4a3a757745cb579759da92d31d8258344125b604cad219c7fd92475c3e12a2824f3dae59c0f78d61aad232501a8c3697fefdbfff8a291f9bd0b5e01b8
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+RjRUZ/K0t6rXld6lw/h1+Qw/h1+8w/h1+Qw/h1+F:YjaZ/K0t6r1njaZ/K0t6r1xec
- TLSH T169278C52F6A481B5D076C474C596A736EA32BC411B308BCB5346FB292E376D09F3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_2aaabd64be8fa7a73a9f91223dd97df4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_2aaabd64be8fa7a73a9f91223dd97df4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_2aaabd64be8fa7a73a9f91223dd97df4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 21.0MB
- SHA256 445628f43709606a6e0d24f49859b5a4617a19f1189c65948d9c18179c1e9c97
- MD5 2aaabd64be8fa7a73a9f91223dd97df4
- SHA1 a93e1f42ee185f98d436570c7e2c83493dfc5481
- SHA512 3c1639c4a3a757745cb579759da92d31d8258344125b604cad219c7fd92475c3e12a2824f3dae59c0f78d61aad232501a8c3697fefdbfff8a291f9bd0b5e01b8
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+RjRUZ/K0t6rXld6lw/h1+Qw/h1+8w/h1+Qw/h1+F:YjaZ/K0t6r1njaZ/K0t6r1xec
- TLSH T169278C52F6A481B5D076C474C596A736EA32BC411B308BCB5346FB292E376D09F3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry