General
- Target 2026-07-20_0b7456337112c29661399e9ad47b2cb9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 8.6MB
- Sample260720-wsxdesax8n
- SHA256 ce1f6c21cc174bf99d62849576add7ead653399f4a1d3d31fd7d24cecc431ebc
- MD5 0b7456337112c29661399e9ad47b2cb9
- SHA1 d59a4110b9d8aae132a7cdf4196b677f2a0c0667
- SHA512 3cdd92d6e5c3bb408eea5e8fa803fb7266fa8709f5612566c7588b2931bb698a1f730168ddcd09194248848beaf6eb2e15ad798902c3b89e06cddb157782d644
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+Tu5x6M1c/h80oAaldmdmnpuhx0z:Jw/h1+Qw/h1+cw/h5Kmd0MKz
- TLSH T199966C22F1A140A5D06AC031CB969335E6B27C554BF087DB6281F7E92F376D07B3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_0b7456337112c29661399e9ad47b2cb9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_0b7456337112c29661399e9ad47b2cb9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_0b7456337112c29661399e9ad47b2cb9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 8.6MB
- SHA256 ce1f6c21cc174bf99d62849576add7ead653399f4a1d3d31fd7d24cecc431ebc
- MD5 0b7456337112c29661399e9ad47b2cb9
- SHA1 d59a4110b9d8aae132a7cdf4196b677f2a0c0667
- SHA512 3cdd92d6e5c3bb408eea5e8fa803fb7266fa8709f5612566c7588b2931bb698a1f730168ddcd09194248848beaf6eb2e15ad798902c3b89e06cddb157782d644
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+Tu5x6M1c/h80oAaldmdmnpuhx0z:Jw/h1+Qw/h1+cw/h5Kmd0MKz
- TLSH T199966C22F1A140A5D06AC031CB969335E6B27C554BF087DB6281F7E92F376D07B3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry