General
- Target 2026-07-31_c73a824e2dc20e947759a4aedb70c2d5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 14.4MB
- Sample260731-t92clawfpb
- SHA256 b2d3a6197f45579eab0dc1d83ca0a6e3f2abb82260eccca29148637c6321d5ed
- MD5 c73a824e2dc20e947759a4aedb70c2d5
- SHA1 38984394e5fef570edac266a8df0066901f522fa
- SHA512 166830f8087a61e22e756e9489130e34ec0ebd3ecff5003e0bf8be2e5a3af88627546e0d458d1689952b478ef0fa402f197a380abef02afd835c8ca7f7daf027
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68Vb48Vb618U68Vbbm/h1+:2cD2cD/cD
- TLSH T10FE69E17F6A440F5D17A983086A69336EB727C110B319BCB9354F61D2F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-31_c73a824e2dc20e947759a4aedb70c2d5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_c73a824e2dc20e947759a4aedb70c2d5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_c73a824e2dc20e947759a4aedb70c2d5_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 14.4MB
- SHA256 b2d3a6197f45579eab0dc1d83ca0a6e3f2abb82260eccca29148637c6321d5ed
- MD5 c73a824e2dc20e947759a4aedb70c2d5
- SHA1 38984394e5fef570edac266a8df0066901f522fa
- SHA512 166830f8087a61e22e756e9489130e34ec0ebd3ecff5003e0bf8be2e5a3af88627546e0d458d1689952b478ef0fa402f197a380abef02afd835c8ca7f7daf027
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68Vb48Vb618U68Vbbm/h1+:2cD2cD/cD
- TLSH T10FE69E17F6A440F5D17A983086A69336EB727C110B319BCB9354F61D2F336D0AE3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry