General
- Target 2026-07-28_cd1319c412951936ac0781a26dfa6a0e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 18.1MB
- Sample260728-yp4z7svble
- SHA256 b8f52788de8d85d2d82cbad72a1a0111d7852bb03b4396703b740bde989f87e9
- MD5 cd1319c412951936ac0781a26dfa6a0e
- SHA1 797178ad92e005ebda2e4aa777c13f55b3eded50
- SHA512 78bb1ec2fde35803951f99432a759cf33a3c03dc1b76d8376644dbc864278c302b3971daccef19571adccd0157a83c3880264611836bbd3cf417b8760a8381ac
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+4w/h1+Qw/h1+8w/h1+Qw/h1+JWqQI0pyH:6WqQjpO
- TLSH T16C177C53F6A481B1D0B6C474C5A6A736EA727C425B308BCB5345E7282E376D09F3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_cd1319c412951936ac0781a26dfa6a0e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_cd1319c412951936ac0781a26dfa6a0e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_cd1319c412951936ac0781a26dfa6a0e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 18.1MB
- SHA256 b8f52788de8d85d2d82cbad72a1a0111d7852bb03b4396703b740bde989f87e9
- MD5 cd1319c412951936ac0781a26dfa6a0e
- SHA1 797178ad92e005ebda2e4aa777c13f55b3eded50
- SHA512 78bb1ec2fde35803951f99432a759cf33a3c03dc1b76d8376644dbc864278c302b3971daccef19571adccd0157a83c3880264611836bbd3cf417b8760a8381ac
- SSDEEP 196608:Jw/h1+Qw/h1+8w/h1+Qw/h1+4w/h1+Qw/h1+8w/h1+Qw/h1+JWqQI0pyH:6WqQjpO
- TLSH T16C177C53F6A481B1D0B6C474C5A6A736EA727C425B308BCB5345E7282E376D09F3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry