General
- Target 2026-07-30_a728e1212eb7d97f2deb2a5436297b27_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 15.3MB
- Sample260730-frxd2azera
- SHA256 b6efdd8701dec0d8b6c9b5f6b0b73a2e6af6d230ecb6e03d2cee2783af4e12ce
- MD5 a728e1212eb7d97f2deb2a5436297b27
- SHA1 35c896234a184809f1440f60675d957a830d4e6f
- SHA512 786d193b2dc0cc51748c8e23d356c477e6449e9f14d39bd7c28e1d7a42f66b765c3e6b726073de7a25c98f0ac0ba26fb08358de13884cb9819fb3ca39cdee993
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+wnGngGn:YGgG
- TLSH T17CF66B55F6A481B1D1BAC174C6969776FA3378414B308BCB5386CB2D2F336D09A3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_a728e1212eb7d97f2deb2a5436297b27_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_a728e1212eb7d97f2deb2a5436297b27_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_a728e1212eb7d97f2deb2a5436297b27_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 15.3MB
- SHA256 b6efdd8701dec0d8b6c9b5f6b0b73a2e6af6d230ecb6e03d2cee2783af4e12ce
- MD5 a728e1212eb7d97f2deb2a5436297b27
- SHA1 35c896234a184809f1440f60675d957a830d4e6f
- SHA512 786d193b2dc0cc51748c8e23d356c477e6449e9f14d39bd7c28e1d7a42f66b765c3e6b726073de7a25c98f0ac0ba26fb08358de13884cb9819fb3ca39cdee993
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+wnGngGn:YGgG
- TLSH T17CF66B55F6A481B1D1BAC174C6969776FA3378414B308BCB5386CB2D2F336D09A3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry