General
- Target 2026-07-19_1aa9ae6c1aa8ef68cea058302aa504a9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 25.4MB
- Sample260719-3fd5msfy6k
- SHA256 afef99adb5eb5d24b670b8c7be202d7d4f01ce211f14be422e647f39a2363352
- MD5 1aa9ae6c1aa8ef68cea058302aa504a9
- SHA1 4e896b0c3ed5671e386d97b3f4d3d3602288f0a0
- SHA512 2dc03289a102611eb525f383f6bd133b30884f701b0d20c0c28141489b11ea261765d91a4029f56d0128fb0e09c243da07ba14f065f67783325dddae6c9b576f
- SSDEEP 196608:JtcIkGn+oKLtcIkGn+oKPtcIkGn+oKLtcIkGn+oKg:I5G+ob5G+o/5G+ob5G+oP
- TLSH T11A476C16B6E440E5C1A9C134CF568632E3B17C294FF197EFA255B2C92E33AD07A3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_1aa9ae6c1aa8ef68cea058302aa504a9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_1aa9ae6c1aa8ef68cea058302aa504a9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_1aa9ae6c1aa8ef68cea058302aa504a9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 25.4MB
- SHA256 afef99adb5eb5d24b670b8c7be202d7d4f01ce211f14be422e647f39a2363352
- MD5 1aa9ae6c1aa8ef68cea058302aa504a9
- SHA1 4e896b0c3ed5671e386d97b3f4d3d3602288f0a0
- SHA512 2dc03289a102611eb525f383f6bd133b30884f701b0d20c0c28141489b11ea261765d91a4029f56d0128fb0e09c243da07ba14f065f67783325dddae6c9b576f
- SSDEEP 196608:JtcIkGn+oKLtcIkGn+oKPtcIkGn+oKLtcIkGn+oKg:I5G+ob5G+o/5G+ob5G+oP
- TLSH T11A476C16B6E440E5C1A9C134CF568632E3B17C294FF197EFA255B2C92E33AD07A3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry