General
- Target 2026-07-30_d194cea74cf0273e57afcc1dbfa2d7a2_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 7.1MB
- Sample260730-3dlfyastex
- SHA256 bdc2ccfdf82e89caf2c27b73883064ad449e4257d601b5cf84fe2f0822528c48
- MD5 d194cea74cf0273e57afcc1dbfa2d7a2
- SHA1 4061bcd5df11b3d2664112af9bb9f79f99e0f2c7
- SHA512 bbb54ca8c21162f4613758338dbe1c77f231120e3ed7c10fd35cf64fb22fee3cb82a004ba8ea6ee3c054eb64c41eef5ee1f5ceaa9274c208fe1d74b5f337a3bd
- SSDEEP 98304:Su5x6M1uWQFHu5x6M1uWQF+0oAaldmdmnp:JSW2wSW2zKmd0
- TLSH T1CC767B13F59540E9D159C034CB5AA232EB32BC490BF1A6EB2290FBD52E37AD07B39715
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_d194cea74cf0273e57afcc1dbfa2d7a2_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_d194cea74cf0273e57afcc1dbfa2d7a2_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_d194cea74cf0273e57afcc1dbfa2d7a2_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 7.1MB
- SHA256 bdc2ccfdf82e89caf2c27b73883064ad449e4257d601b5cf84fe2f0822528c48
- MD5 d194cea74cf0273e57afcc1dbfa2d7a2
- SHA1 4061bcd5df11b3d2664112af9bb9f79f99e0f2c7
- SHA512 bbb54ca8c21162f4613758338dbe1c77f231120e3ed7c10fd35cf64fb22fee3cb82a004ba8ea6ee3c054eb64c41eef5ee1f5ceaa9274c208fe1d74b5f337a3bd
- SSDEEP 98304:Su5x6M1uWQFHu5x6M1uWQF+0oAaldmdmnp:JSW2wSW2zKmd0
- TLSH T1CC767B13F59540E9D159C034CB5AA232EB32BC490BF1A6EB2290FBD52E37AD07B39715
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry