General
- Target 2026-07-27_25bb51ab6915667b1609383ebf4253e5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 9.6MB
- Sample260727-hscgcsxfle
- SHA256 97feaa2f59d0da564935163c0e2b5c52d7a1774f41853e614cc7b5fa575b4613
- MD5 25bb51ab6915667b1609383ebf4253e5
- SHA1 8e58d38180d5b3dce813ef510b83784d2f9e191a
- SHA512 494298c031f2fa54a3aab5aaef34f2bbdf3e3d102a447bd0b4dd74bd081d73b135266d24d0c237cdbc09cdab4d2a9d0b88dc91ee75da7dc30c07e1b1bf3d4073
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnpz/h1+ARs/h1+:JSWyZ/K0ttYVAAT1Kmd0x/h1+AK/h1+
- TLSH T133A67C13F2A441A9E06AD174CE669631EB327C494BF1A5DF3240B7D82E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_25bb51ab6915667b1609383ebf4253e5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_25bb51ab6915667b1609383ebf4253e5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_25bb51ab6915667b1609383ebf4253e5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 9.6MB
- SHA256 97feaa2f59d0da564935163c0e2b5c52d7a1774f41853e614cc7b5fa575b4613
- MD5 25bb51ab6915667b1609383ebf4253e5
- SHA1 8e58d38180d5b3dce813ef510b83784d2f9e191a
- SHA512 494298c031f2fa54a3aab5aaef34f2bbdf3e3d102a447bd0b4dd74bd081d73b135266d24d0c237cdbc09cdab4d2a9d0b88dc91ee75da7dc30c07e1b1bf3d4073
- SSDEEP 98304:Su5x6M1uWQtZ/K0tGOFWVRuLftCTY0oAaldmdmnpz/h1+ARs/h1+:JSWyZ/K0ttYVAAT1Kmd0x/h1+AK/h1+
- TLSH T133A67C13F2A441A9E06AD174CE669631EB327C494BF1A5DF3240B7D82E37AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry