General
- Target 2026-07-20_b397066dac9b0cfa132c2c50abd30e51_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 50.9MB
- Sample260720-kyd89act7q
- SHA256 63b6f489ac0587abeb5b03695cea3d37a2a0371404d26c8d36913c3cfe4a40e0
- MD5 b397066dac9b0cfa132c2c50abd30e51
- SHA1 57ecd33a5c69181d5a8bd80c09b895c584b0911d
- SHA512 15e6f1f8730f91abb799970dd28ab14ea6ee039eca453df722b376c784c29ccaa1aae064e877e30497fa63c11c03bce7940e56af463ef22da934e86800dee7b1
- SSDEEP 393216:2cD2cD/cDuUEB2cD/cDuUEtQevvqc2W1cpV2XI329j:tZ41Ef41E8c23pV2X+Y
- TLSH T1C2C77B52BAE443E2D3AA953485B68272EB717C1E1B3197BB4278F21E1F336D05D39321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_b397066dac9b0cfa132c2c50abd30e51_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_b397066dac9b0cfa132c2c50abd30e51_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_b397066dac9b0cfa132c2c50abd30e51_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 50.9MB
- SHA256 63b6f489ac0587abeb5b03695cea3d37a2a0371404d26c8d36913c3cfe4a40e0
- MD5 b397066dac9b0cfa132c2c50abd30e51
- SHA1 57ecd33a5c69181d5a8bd80c09b895c584b0911d
- SHA512 15e6f1f8730f91abb799970dd28ab14ea6ee039eca453df722b376c784c29ccaa1aae064e877e30497fa63c11c03bce7940e56af463ef22da934e86800dee7b1
- SSDEEP 393216:2cD2cD/cDuUEB2cD/cDuUEtQevvqc2W1cpV2XI329j:tZ41Ef41E8c23pV2X+Y
- TLSH T1C2C77B52BAE443E2D3AA953485B68272EB717C1E1B3197BB4278F21E1F336D05D39321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry