General
- Target 2026-07-29_660172b9c7a40feb7b0991253ead11e9_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 8.9MB
- Sample260729-gbsxcahn3t
- SHA256 30421c882eb6369ae7a0469e94619a49b7fbe32800f4ad2d6123ad6909e7790b
- MD5 660172b9c7a40feb7b0991253ead11e9
- SHA1 229eee0fe59d3d9d67dedd97f9f4d8a558528f65
- SHA512 2c9d8f550535197cddf120ceffd6681982e0ba9b6ec3dd9114646c9786e0bc39dbd9c1a576396eda9064013ef589ad93c24957d9b4f9a56d8da1f19e8526cc1f
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTPoq2Vjnmkjo:Qi8kL3HxzOGgGnPo
- TLSH T1F8969E06B6E841A9D0B7C274C6668637E6727C450B30DBDF5295B61E2F33BD05B3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_660172b9c7a40feb7b0991253ead11e9_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_660172b9c7a40feb7b0991253ead11e9_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_660172b9c7a40feb7b0991253ead11e9_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 8.9MB
- SHA256 30421c882eb6369ae7a0469e94619a49b7fbe32800f4ad2d6123ad6909e7790b
- MD5 660172b9c7a40feb7b0991253ead11e9
- SHA1 229eee0fe59d3d9d67dedd97f9f4d8a558528f65
- SHA512 2c9d8f550535197cddf120ceffd6681982e0ba9b6ec3dd9114646c9786e0bc39dbd9c1a576396eda9064013ef589ad93c24957d9b4f9a56d8da1f19e8526cc1f
- SSDEEP 98304:nu5x6M1WoDDklJ6qqUHxqPFeLCbpuAXxoWCgPHYgCsTPoq2Vjnmkjo:Qi8kL3HxzOGgGnPo
- TLSH T1F8969E06B6E841A9D0B7C274C6668637E6727C450B30DBDF5295B61E2F33BD05B3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry