General
- Target 2026-07-31_0775435271aa939e2d468dfdc9ae5afc_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_stealc_vidar
- Size 14.2MB
- Sample260731-lsvvgszfld
- SHA256 7380abbd8c53083794e3a750339d80332d91549d7c443d59827c8a1f8097165f
- MD5 0775435271aa939e2d468dfdc9ae5afc
- SHA1 5088cb9b2334915d64311c1348465ec3cbc8abce
- SHA512 3811a5c1f7507e4e0a4e52c181a624d6a4ef641c242ddb44994a85f1864cda5eb480764ebb3df84a47d616ea7edaf0be0809621b147abb6c212a09d5d05c357d
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+iUEtQeTbvf2zlOr:zUEtQevvq6
- TLSH T197E69E56E6A441B5D17BD074C7969637FBB2780107308BCB4391CB2E2F376A19A3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_0775435271aa939e2d468dfdc9ae5afc_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_0775435271aa939e2d468dfdc9ae5afc_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_0775435271aa939e2d468dfdc9ae5afc_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_stealc_vidar
- Size 14.2MB
- SHA256 7380abbd8c53083794e3a750339d80332d91549d7c443d59827c8a1f8097165f
- MD5 0775435271aa939e2d468dfdc9ae5afc
- SHA1 5088cb9b2334915d64311c1348465ec3cbc8abce
- SHA512 3811a5c1f7507e4e0a4e52c181a624d6a4ef641c242ddb44994a85f1864cda5eb480764ebb3df84a47d616ea7edaf0be0809621b147abb6c212a09d5d05c357d
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+iUEtQeTbvf2zlOr:zUEtQevvq6
- TLSH T197E69E56E6A441B5D17BD074C7969637FBB2780107308BCB4391CB2E2F376A19A3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry