General
- Target 2026-07-30_9ec062209a3941bd9b99b627fb802635_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 29.3MB
- Sample260730-fs8hpadj4t
- SHA256 bbb0707627724f15fd2a7688c655e9890303c425a981b0309dd4901fcf23eb4f
- MD5 9ec062209a3941bd9b99b627fb802635
- SHA1 43d32f6c578abe01b0c001bb57a01e68424f4439
- SHA512 070c61512d578259a1ae5289b3eb2d92338bf1f86c97820fae813ad60e06220bd9971cd9680d83a703ce3f80a4d7fefc71638aca1723f11b72e7402154b4c1fa
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+5lw/h1+Qw/h1+cw/h1+Qw/h1+5sxw/h1+Qw/h1+C:oQI
- TLSH T163675A91F5A08172D17A8471C6D6A77AFA3378411B708AC79386DB3C2F272D19A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_9ec062209a3941bd9b99b627fb802635_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_9ec062209a3941bd9b99b627fb802635_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_9ec062209a3941bd9b99b627fb802635_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 29.3MB
- SHA256 bbb0707627724f15fd2a7688c655e9890303c425a981b0309dd4901fcf23eb4f
- MD5 9ec062209a3941bd9b99b627fb802635
- SHA1 43d32f6c578abe01b0c001bb57a01e68424f4439
- SHA512 070c61512d578259a1ae5289b3eb2d92338bf1f86c97820fae813ad60e06220bd9971cd9680d83a703ce3f80a4d7fefc71638aca1723f11b72e7402154b4c1fa
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+5lw/h1+Qw/h1+cw/h1+Qw/h1+5sxw/h1+Qw/h1+C:oQI
- TLSH T163675A91F5A08172D17A8471C6D6A77AFA3378411B708AC79386DB3C2F272D19A36733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application