General
- Target 2026-07-19_f1d4b725bb631830a610e88d2882bc3c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 52.7MB
- Sample260719-zckapsbv2r
- SHA256 90afe39366171c676745699cca5c78c6f7454dca4cad0985db3aacdb71333962
- MD5 f1d4b725bb631830a610e88d2882bc3c
- SHA1 384a1872b07200f0ec72c68dc2307eb1bfe57132
- SHA512 7e7978cd65b810ff98cb86c3ae68a7d44ca711720b12b1a716526b95856f894c7304b358e13f093d06427773ed792dd53b25ae009dd43e31963fed27970a99d5
- SSDEEP 393216:I5G+ob5G+oo5G+ob5G+oHU5G+ob5G+oo5G+ob5G+oHC:I47b47o47b47047b47o47b47i
- TLSH T149C76B16B6E440E5C1AAC134CF568632E7B17C294FF097EB6255B2C92E33AD07E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_f1d4b725bb631830a610e88d2882bc3c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_f1d4b725bb631830a610e88d2882bc3c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_f1d4b725bb631830a610e88d2882bc3c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 52.7MB
- SHA256 90afe39366171c676745699cca5c78c6f7454dca4cad0985db3aacdb71333962
- MD5 f1d4b725bb631830a610e88d2882bc3c
- SHA1 384a1872b07200f0ec72c68dc2307eb1bfe57132
- SHA512 7e7978cd65b810ff98cb86c3ae68a7d44ca711720b12b1a716526b95856f894c7304b358e13f093d06427773ed792dd53b25ae009dd43e31963fed27970a99d5
- SSDEEP 393216:I5G+ob5G+oo5G+ob5G+oHU5G+ob5G+oo5G+ob5G+oHC:I47b47o47b47047b47o47b47i
- TLSH T149C76B16B6E440E5C1AAC134CF568632E7B17C294FF097EB6255B2C92E33AD07E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry