General
- Target 2026-07-31_71391ac9e191346416a53bc70e28353b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 35.6MB
- Sample260731-3rhbfatape
- SHA256 ce0b52e0d4a72b4c6bf8d3bb43b80ce83121debf0e63e3b5feb698a2646e203a
- MD5 71391ac9e191346416a53bc70e28353b
- SHA1 db86cbe1998ad264516b65c93aa0b8dbd1202044
- SHA512 287cd0c531f4f8f3db67a2a53312c561cc671aa0af9120761c16170848595fdefb2d9649a9d2bcef9bb087b644f900ca6bd5eb1945d94e3d2a269c8c1d736fbe
- SSDEEP 393216:2cD2cD/cDzvyEYKb7cD2cD/cDzvyEYKbfD:tZ4faZ4fp
- TLSH T1ED879E16BBA440F5E17A953089669732EB72BC120B31DBCB4394F61D2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_71391ac9e191346416a53bc70e28353b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_71391ac9e191346416a53bc70e28353b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_71391ac9e191346416a53bc70e28353b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 35.6MB
- SHA256 ce0b52e0d4a72b4c6bf8d3bb43b80ce83121debf0e63e3b5feb698a2646e203a
- MD5 71391ac9e191346416a53bc70e28353b
- SHA1 db86cbe1998ad264516b65c93aa0b8dbd1202044
- SHA512 287cd0c531f4f8f3db67a2a53312c561cc671aa0af9120761c16170848595fdefb2d9649a9d2bcef9bb087b644f900ca6bd5eb1945d94e3d2a269c8c1d736fbe
- SSDEEP 393216:2cD2cD/cDzvyEYKb7cD2cD/cDzvyEYKbfD:tZ4faZ4fp
- TLSH T1ED879E16BBA440F5E17A953089669732EB72BC120B31DBCB4394F61D2F336D05E3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application