General
- Target 2026-07-19_b4b3bc8b7ae86d3a59d0a2fe08008a25_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 8.9MB
- Sample260719-1dc4fsfx91
- SHA256 efd7703ac641376458afec4e92ab6f395c357d24b1dd9907a872722cc2372591
- MD5 b4b3bc8b7ae86d3a59d0a2fe08008a25
- SHA1 2f4550e9c4f40bc9ac1bb59d4d2e306b9c4d1989
- SHA512 dc4f436a0a227bc534281f74b7e7acaf033362f7406a141b11eac0f5cdaf3658d7d0864e07a25e91fc04fb57b33c64a30c9f2e9a1c5d2c86e99d037b286d7f34
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnpz/h1+AR5:JSWyZ/K0ttYVAAT1Kmd0x/h1+AL
- TLSH T1D3967C13F2A440E9E1AAD174CE669231DB327C494BF1A5EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_b4b3bc8b7ae86d3a59d0a2fe08008a25_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_b4b3bc8b7ae86d3a59d0a2fe08008a25_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_b4b3bc8b7ae86d3a59d0a2fe08008a25_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 8.9MB
- SHA256 efd7703ac641376458afec4e92ab6f395c357d24b1dd9907a872722cc2372591
- MD5 b4b3bc8b7ae86d3a59d0a2fe08008a25
- SHA1 2f4550e9c4f40bc9ac1bb59d4d2e306b9c4d1989
- SHA512 dc4f436a0a227bc534281f74b7e7acaf033362f7406a141b11eac0f5cdaf3658d7d0864e07a25e91fc04fb57b33c64a30c9f2e9a1c5d2c86e99d037b286d7f34
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnpz/h1+AR5:JSWyZ/K0ttYVAAT1Kmd0x/h1+AL
- TLSH T1D3967C13F2A440E9E1AAD174CE669231DB327C494BF1A5EF3240B6D52E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry