General
- Target 2026-07-29_24e6e30d3c79cd169a95edb4ab44ceda_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 8.4MB
- Sample260729-wp49vscq71
- SHA256 5183b666121fc8cf6bd24f910af94830ccf2a5e77542775dfdd56c336317ac63
- MD5 24e6e30d3c79cd169a95edb4ab44ceda
- SHA1 529c2a548fb9e5ef4a618c72e7131b2006ef4a41
- SHA512 0fac200d56fafa2824b5075b681fb0cc649979a2ff62b78cf9eb3a4484913752d1fc8de941ecd05d65d082b37abbb20bf2caa7493ce0e2af67b540b4a4a35e34
- SSDEEP 98304:Su5x6M1c/h1+a0oAaldmdmnpgu5x6M1c/h1+a0oAaldmdmnpuj:Jw/h1+vKmd0hw/h1+vKmd0cj
- TLSH T123967C13B19440E9D166C074CE86D236EB327C4957F196EB3281BBD92E37AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-29_24e6e30d3c79cd169a95edb4ab44ceda_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_24e6e30d3c79cd169a95edb4ab44ceda_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_24e6e30d3c79cd169a95edb4ab44ceda_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 8.4MB
- SHA256 5183b666121fc8cf6bd24f910af94830ccf2a5e77542775dfdd56c336317ac63
- MD5 24e6e30d3c79cd169a95edb4ab44ceda
- SHA1 529c2a548fb9e5ef4a618c72e7131b2006ef4a41
- SHA512 0fac200d56fafa2824b5075b681fb0cc649979a2ff62b78cf9eb3a4484913752d1fc8de941ecd05d65d082b37abbb20bf2caa7493ce0e2af67b540b4a4a35e34
- SSDEEP 98304:Su5x6M1c/h1+a0oAaldmdmnpgu5x6M1c/h1+a0oAaldmdmnpuj:Jw/h1+vKmd0hw/h1+vKmd0cj
- TLSH T123967C13B19440E9D166C074CE86D236EB327C4957F196EB3281BBD92E37AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry