General
- Target 2026-07-20_0efbcbf3b8855e1878fef5b80f63194a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 21.1MB
- Sample260720-mk3qsshv4t
- SHA256 3f3b622bacb9e99d10e4ff1282859277dff330047e188c6173bf77b4f98cb43e
- MD5 0efbcbf3b8855e1878fef5b80f63194a
- SHA1 a56502248c58907d9133fd3e6a7001ac0600fd20
- SHA512 fdaadb8a78f90d24c2e41880d6cf9d54e49d6cb41738062397f1bfadada295dcf3ebfdf73a6dceb5c35743cde987f2d87a126973d309449244fd9589b386473b
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbC/8Vb618U68Vbb8Vb618U68VbCu2VhK:2cD2cDtcD2cDXe8
- TLSH T15227AE17F6A440F5D17A98308A669332EB72BC110B3197CB53A4F6592F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_0efbcbf3b8855e1878fef5b80f63194a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_0efbcbf3b8855e1878fef5b80f63194a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_0efbcbf3b8855e1878fef5b80f63194a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 21.1MB
- SHA256 3f3b622bacb9e99d10e4ff1282859277dff330047e188c6173bf77b4f98cb43e
- MD5 0efbcbf3b8855e1878fef5b80f63194a
- SHA1 a56502248c58907d9133fd3e6a7001ac0600fd20
- SHA512 fdaadb8a78f90d24c2e41880d6cf9d54e49d6cb41738062397f1bfadada295dcf3ebfdf73a6dceb5c35743cde987f2d87a126973d309449244fd9589b386473b
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbC/8Vb618U68Vbb8Vb618U68VbCu2VhK:2cD2cDtcD2cDXe8
- TLSH T15227AE17F6A440F5D17A98308A669332EB72BC110B3197CB53A4F6592F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application