General
- Target 2026-07-20_5704f3269c5fe836b7ce116006f15be8_amadey_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader
- Size 7.9MB
- Sample260720-waeqnah12p
- SHA256 58ce87eb239d3409113e2958ce1bfec6791ce91fa7230c149c1df1508199f2ed
- MD5 5704f3269c5fe836b7ce116006f15be8
- SHA1 0230f910afa8d3bb9e81269268fb3e744e343015
- SHA512 856ca00ab39ac7f9f55b15330a6e85ab4b5ca9a966673491563c783eeb6f52c7e9db0a0c1f0bd5dabd5e3e94c04cd124bc996a14afbf6706b583fc19328628e5
- SSDEEP 98304:Su5x6M1uWQLtWa7qNu5x6M1uWQLtWa7qL:JSWRSSWRL
- TLSH T18F867C23F1E200E9C05DD0359B5AA332AAE27C614FB0E7CB8251B7551F77AD06B3971A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_5704f3269c5fe836b7ce116006f15be8_amadey_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_5704f3269c5fe836b7ce116006f15be8_amadey_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_5704f3269c5fe836b7ce116006f15be8_amadey_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader
- Size 7.9MB
- SHA256 58ce87eb239d3409113e2958ce1bfec6791ce91fa7230c149c1df1508199f2ed
- MD5 5704f3269c5fe836b7ce116006f15be8
- SHA1 0230f910afa8d3bb9e81269268fb3e744e343015
- SHA512 856ca00ab39ac7f9f55b15330a6e85ab4b5ca9a966673491563c783eeb6f52c7e9db0a0c1f0bd5dabd5e3e94c04cd124bc996a14afbf6706b583fc19328628e5
- SSDEEP 98304:Su5x6M1uWQLtWa7qNu5x6M1uWQLtWa7qL:JSWRSSWRL
- TLSH T18F867C23F1E200E9C05DD0359B5AA332AAE27C614FB0E7CB8251B7551F77AD06B3971A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry