General
- Target 2026-07-22_af7bab6e1ea240af730ab2745814167a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 18.6MB
- Sample260722-vsbw2sdn31
- SHA256 69097cee3be7d6c2c8c4c3947ffc64a121c717db2092da36e9d80fcab6b86ef1
- MD5 af7bab6e1ea240af730ab2745814167a
- SHA1 0591f7dc7744c4ce2328b2ac54e76f3760eafd58
- SHA512 cf36ec92f2a976a8ba583a7304e6e3f5eb411e49bdd6cd7b2dbd505376e845b9e5c9e32789ddcf4234702fe33ef83a096bbce3a7f39100f19c32d4a03bb82e44
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCA8Vb618U68Vbb8Vb618U68VbC3:2cD2cDgcD2cDm
- TLSH T15817AE17F6A444F5D17A99304AA59332EB72BC110B3197CB83A4F61D1F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_af7bab6e1ea240af730ab2745814167a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_af7bab6e1ea240af730ab2745814167a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_af7bab6e1ea240af730ab2745814167a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 18.6MB
- SHA256 69097cee3be7d6c2c8c4c3947ffc64a121c717db2092da36e9d80fcab6b86ef1
- MD5 af7bab6e1ea240af730ab2745814167a
- SHA1 0591f7dc7744c4ce2328b2ac54e76f3760eafd58
- SHA512 cf36ec92f2a976a8ba583a7304e6e3f5eb411e49bdd6cd7b2dbd505376e845b9e5c9e32789ddcf4234702fe33ef83a096bbce3a7f39100f19c32d4a03bb82e44
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCA8Vb618U68Vbb8Vb618U68VbC3:2cD2cDgcD2cDm
- TLSH T15817AE17F6A444F5D17A99304AA59332EB72BC110B3197CB83A4F61D1F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry