General
- Target 2026-07-20_56a4da2814d03348cf63dedef2266fad_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 11.3MB
- Sample260720-wanzbsbx8t
- SHA256 c66799cb9d334d7a3b69ec32fdb23de6099516b1e30a5e39cb35f91226db16ef
- MD5 56a4da2814d03348cf63dedef2266fad
- SHA1 0f0e75c31016f11634b221a110a973b0f80a95e6
- SHA512 fb68f420437f3d2c46734925db0ab29125cd2de3f4027c97f89491df00fd8f13596bac082b55d5ffcb6d6bca4eaeeace93fa7ba829836b30635e28c76093676a
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+Tu5x6M1c/h80oAaldmdmnpgq9ceq9+2xl/SSay+:Jw/h1+Qw/h1+cw/h5Kmd0iWqQI0py+
- TLSH T1A6C68E13F2A440A5E06AD174CA669332EB327C455BB096DF1340F7A92F77AD07B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_56a4da2814d03348cf63dedef2266fad_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_56a4da2814d03348cf63dedef2266fad_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_56a4da2814d03348cf63dedef2266fad_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 11.3MB
- SHA256 c66799cb9d334d7a3b69ec32fdb23de6099516b1e30a5e39cb35f91226db16ef
- MD5 56a4da2814d03348cf63dedef2266fad
- SHA1 0f0e75c31016f11634b221a110a973b0f80a95e6
- SHA512 fb68f420437f3d2c46734925db0ab29125cd2de3f4027c97f89491df00fd8f13596bac082b55d5ffcb6d6bca4eaeeace93fa7ba829836b30635e28c76093676a
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+Tu5x6M1c/h80oAaldmdmnpgq9ceq9+2xl/SSay+:Jw/h1+Qw/h1+cw/h5Kmd0iWqQI0py+
- TLSH T1A6C68E13F2A440A5E06AD174CA669332EB327C455BB096DF1340F7A92F77AD07B39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry