General
- Target 2026-07-30_ae2ac613a2ae7c5e9142b47c814914ab_amadey_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 4.8MB
- Sample260730-3fe2yastgz
- SHA256 f0b81474400a83ba4ec309fdfaaa3ef6149f8649132ec218a07ea27e7c327e40
- MD5 ae2ac613a2ae7c5e9142b47c814914ab
- SHA1 20e34830c81daea6c3969e9db1ba60073eac9a4e
- SHA512 97cc96f1de7b9d9ff22fa2ac9a5c454e2dff4532b0f9ea07af5e47d46320d6bd8d670f05f594f96d9bb23c9d387f8348bc1f2bd4c9cb063aa9ada0dc8332815a
- SSDEEP 49152:tYRw5x6M1t/KCGZd0qgNEf16lhulJLirWAYRw5x6M1t/KCGZd0qgNEf16lhulJLc:Su5x6M1uWQFHu5x6M1uWQFTe
- TLSH T18036AD53F5C140F9D41DD439835AA332EA32BC861B20B6CF53A1DB552E37AE06B39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_ae2ac613a2ae7c5e9142b47c814914ab_amadey_darkgate_elex_emotet_glassworm_hawkeye_hijackload.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_ae2ac613a2ae7c5e9142b47c814914ab_amadey_darkgate_elex_emotet_glassworm_hawkeye_hijackload.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_ae2ac613a2ae7c5e9142b47c814914ab_amadey_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 4.8MB
- SHA256 f0b81474400a83ba4ec309fdfaaa3ef6149f8649132ec218a07ea27e7c327e40
- MD5 ae2ac613a2ae7c5e9142b47c814914ab
- SHA1 20e34830c81daea6c3969e9db1ba60073eac9a4e
- SHA512 97cc96f1de7b9d9ff22fa2ac9a5c454e2dff4532b0f9ea07af5e47d46320d6bd8d670f05f594f96d9bb23c9d387f8348bc1f2bd4c9cb063aa9ada0dc8332815a
- SSDEEP 49152:tYRw5x6M1t/KCGZd0qgNEf16lhulJLirWAYRw5x6M1t/KCGZd0qgNEf16lhulJLc:Su5x6M1uWQFHu5x6M1uWQFTe
- TLSH T18036AD53F5C140F9D41DD439835AA332EA32BC861B20B6CF53A1DB552E37AE06B39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry