General
- Target 2026-07-19_63b491beb1b42166b20625b482ec8fef_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 18.6MB
- Sample260720-bs993abv4j
- SHA256 3b150620a1cdccdb92b725771b9c3319c7df750f297d4b64fb97a73702d725ec
- MD5 63b491beb1b42166b20625b482ec8fef
- SHA1 6c7ef0141c35a28d35d1f3aadda92935a6086512
- SHA512 a27fa3ec36f67bbe1dd146b9e1956e9f630a467025b92c4c02ae993d1cf1c106d26b2539b5f03ae4b212d210f28a80a71cb5106214e4bb42033a0d73101a363c
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Yw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+PC/G:e
- TLSH T17A175A91F5A08172D0B68471C6D6A77AFA337C415B308BC79386DB2C2F272D19A36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-19_63b491beb1b42166b20625b482ec8fef_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_63b491beb1b42166b20625b482ec8fef_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_63b491beb1b42166b20625b482ec8fef_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 18.6MB
- SHA256 3b150620a1cdccdb92b725771b9c3319c7df750f297d4b64fb97a73702d725ec
- MD5 63b491beb1b42166b20625b482ec8fef
- SHA1 6c7ef0141c35a28d35d1f3aadda92935a6086512
- SHA512 a27fa3ec36f67bbe1dd146b9e1956e9f630a467025b92c4c02ae993d1cf1c106d26b2539b5f03ae4b212d210f28a80a71cb5106214e4bb42033a0d73101a363c
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+Yw/h1+Qw/h1+cw/h1+Qw/h1+vw/h1+PC/G:e
- TLSH T17A175A91F5A08172D0B68471C6D6A77AFA337C415B308BC79386DB2C2F272D19A36736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry