General
- Target 2026-07-22_ddcd9a9c72b932a5c74d2fe05d5813fe_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 9.3MB
- Sample260722-xtbc1ssfpb
- SHA256 6746f434d02a3edd3508b9461891ae9858691d5997f27177a3708948f3eb5a60
- MD5 ddcd9a9c72b932a5c74d2fe05d5813fe
- SHA1 17ceddac7fff465fd9941cb25c086ad49f637b6a
- SHA512 7bc76242cb9ee2c930967a988f57783ad73b8d29c58cfd831eea0b61887319cf15a24120042f1e192efeffd16d0b76cfdb122ef91fa16c31424eb376b541f639
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb4e5x6c1QVb6nUm8Ule5x6c1QVbC:l8Vb618U68Vbb8Vb618U68VbC
- TLSH T1EBA6AE17F6A444F5D17A99304AA59332EB72BC110B3197CB83A4F61D1F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_ddcd9a9c72b932a5c74d2fe05d5813fe_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_ddcd9a9c72b932a5c74d2fe05d5813fe_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_ddcd9a9c72b932a5c74d2fe05d5813fe_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 9.3MB
- SHA256 6746f434d02a3edd3508b9461891ae9858691d5997f27177a3708948f3eb5a60
- MD5 ddcd9a9c72b932a5c74d2fe05d5813fe
- SHA1 17ceddac7fff465fd9941cb25c086ad49f637b6a
- SHA512 7bc76242cb9ee2c930967a988f57783ad73b8d29c58cfd831eea0b61887319cf15a24120042f1e192efeffd16d0b76cfdb122ef91fa16c31424eb376b541f639
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb4e5x6c1QVb6nUm8Ule5x6c1QVbC:l8Vb618U68Vbb8Vb618U68VbC
- TLSH T1EBA6AE17F6A444F5D17A99304AA59332EB72BC110B3197CB83A4F61D1F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry