General
- Target 2026-07-27_eef3aad197157b407f659b53369a18f3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 10.6MB
- Sample260727-pxmapasyhx
- SHA256 67ad29b47d80bd3fdd367b6d32b93f6ef2e7bc8a95bc0be380928ebbe8146550
- MD5 eef3aad197157b407f659b53369a18f3
- SHA1 32c8647ebc8cb65df7973d8febbe21f9086382b1
- SHA512 9a921f02023a7cdacecde7430ecbcfd4c859b3a847fef1560c7423f7543744f2ce7d3d006c69f1fadd5720739e63b6f1af7552cc2f56b043e03f0305166c83a1
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxLu5x6M1pLapIkoq2Vjnmxp:JtcIkGnkUtcIkGnkp
- TLSH T187B65C26B1A440A5C1A98134CF568631F3B27C298FF097EBA255F2DD1F336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-27_eef3aad197157b407f659b53369a18f3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_eef3aad197157b407f659b53369a18f3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_eef3aad197157b407f659b53369a18f3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 10.6MB
- SHA256 67ad29b47d80bd3fdd367b6d32b93f6ef2e7bc8a95bc0be380928ebbe8146550
- MD5 eef3aad197157b407f659b53369a18f3
- SHA1 32c8647ebc8cb65df7973d8febbe21f9086382b1
- SHA512 9a921f02023a7cdacecde7430ecbcfd4c859b3a847fef1560c7423f7543744f2ce7d3d006c69f1fadd5720739e63b6f1af7552cc2f56b043e03f0305166c83a1
- SSDEEP 98304:Su5x6M1pLapIkoq2VjnmxLu5x6M1pLapIkoq2Vjnmxp:JtcIkGnkUtcIkGnkp
- TLSH T187B65C26B1A440A5C1A98134CF568631F3B27C298FF097EBA255F2DD1F336D07E3A616
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry