General
- Target 2026-07-20_870a35e883156a968e8fe5cccf8cf7f9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 19.0MB
- Sample260720-ldql8acz7p
- SHA256 b7bf72c3b6f468822bd4e288629069581bf4a326aff87a21ee41c1f2d4968cb7
- MD5 870a35e883156a968e8fe5cccf8cf7f9
- SHA1 783ccbf4b7e0d4920e6332038089b81855be20f3
- SHA512 e9f4fb3ca660d7b39ce4aeec437697efa0293a79dc7cd14b1ae2cb5dac46946f4e7b058556aabe6e3ea19365b62dff45fd8cb4e2fbfb3db10dabc1bdb084f3c0
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbC/8Vb618U68Vbb8Vb618U68VbCB/h1+:2cD2cDtcD2cD
- TLSH T12A17AE17F6A440F5D17A983086A69336EB72BC110B3197CB93A4F61D1F336D09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_870a35e883156a968e8fe5cccf8cf7f9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_870a35e883156a968e8fe5cccf8cf7f9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_870a35e883156a968e8fe5cccf8cf7f9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 19.0MB
- SHA256 b7bf72c3b6f468822bd4e288629069581bf4a326aff87a21ee41c1f2d4968cb7
- MD5 870a35e883156a968e8fe5cccf8cf7f9
- SHA1 783ccbf4b7e0d4920e6332038089b81855be20f3
- SHA512 e9f4fb3ca660d7b39ce4aeec437697efa0293a79dc7cd14b1ae2cb5dac46946f4e7b058556aabe6e3ea19365b62dff45fd8cb4e2fbfb3db10dabc1bdb084f3c0
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbC/8Vb618U68Vbb8Vb618U68VbCB/h1+:2cD2cDtcD2cD
- TLSH T12A17AE17F6A440F5D17A983086A69336EB72BC110B3197CB93A4F61D1F336D09E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry