General
- Target 2026-07-29_1a17ee3e347e637fe457888d217ce08a_amadey_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader
- Size 4.5MB
- Sample260729-h2banabl8w
- SHA256 9ccfbd8dca348ef929ffcf7452810f1338707f30059a1cb3eecc02cc88877100
- MD5 1a17ee3e347e637fe457888d217ce08a
- SHA1 6f4f1a4b4e60c42adc25d66ea845d3bfc6e02d92
- SHA512 95f93693b13f9c415e793d52ee43f9b1706fb513218f8d6919a51d556e3e4bc375ee9d480837b77bd0b3222fb6e0e280e392ae5391dc6249cd07a083f280f560
- SSDEEP 49152:tYRw5x6M1t/KCGZd0qgNEf16lhulJLirWAYRw5x6M1t/KCGZd0qgNEf16lhulJL/:Su5x6M1uWQFHu5x6M1uWQF1
- TLSH T12626AD53F5C140F9D41DD439835EA332EA32BC851B20B6CB53A1DB552E37AE06B3972A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_1a17ee3e347e637fe457888d217ce08a_amadey_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_1a17ee3e347e637fe457888d217ce08a_amadey_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_1a17ee3e347e637fe457888d217ce08a_amadey_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader
- Size 4.5MB
- SHA256 9ccfbd8dca348ef929ffcf7452810f1338707f30059a1cb3eecc02cc88877100
- MD5 1a17ee3e347e637fe457888d217ce08a
- SHA1 6f4f1a4b4e60c42adc25d66ea845d3bfc6e02d92
- SHA512 95f93693b13f9c415e793d52ee43f9b1706fb513218f8d6919a51d556e3e4bc375ee9d480837b77bd0b3222fb6e0e280e392ae5391dc6249cd07a083f280f560
- SSDEEP 49152:tYRw5x6M1t/KCGZd0qgNEf16lhulJLirWAYRw5x6M1t/KCGZd0qgNEf16lhulJL/:Su5x6M1uWQFHu5x6M1uWQF1
- TLSH T12626AD53F5C140F9D41DD439835EA332EA32BC851B20B6CB53A1DB552E37AE06B3972A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry