General
- Target 2026-08-02_080eb2b39d3ed554fd54eb0364d17cc3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 63.0MB
- Sample260802-13advsge26
- SHA256 bc6444e562bb3db58177566fb5f5c9e6b1a30f05719f5fb77b5fce34d0fafc9d
- MD5 080eb2b39d3ed554fd54eb0364d17cc3
- SHA1 61a6dbf068266637b2f4e3dcc3be72279dea1168
- SHA512 1872af78a088ad81e20b9ef9b7274f5954d77f84b2422fad974fc3f116427896efa2fc02a86c58b52c6b2ca92f6adabf58805a4487140818f3d9e6492b41ff6a
- SSDEEP 393216:2cDcywcDcyYobcDcywcDcyYodncDcywcDcyYobcDcyh:tAyTAyZ4AyTAyZeAyTAyZ4Ayh
- TLSH T195E78C17F6A841F5D07AD074C6969676EA727C420B309ACF0394F7192E33AE09F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_080eb2b39d3ed554fd54eb0364d17cc3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_080eb2b39d3ed554fd54eb0364d17cc3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_080eb2b39d3ed554fd54eb0364d17cc3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 63.0MB
- SHA256 bc6444e562bb3db58177566fb5f5c9e6b1a30f05719f5fb77b5fce34d0fafc9d
- MD5 080eb2b39d3ed554fd54eb0364d17cc3
- SHA1 61a6dbf068266637b2f4e3dcc3be72279dea1168
- SHA512 1872af78a088ad81e20b9ef9b7274f5954d77f84b2422fad974fc3f116427896efa2fc02a86c58b52c6b2ca92f6adabf58805a4487140818f3d9e6492b41ff6a
- SSDEEP 393216:2cDcywcDcyYobcDcywcDcyYodncDcywcDcyYobcDcyh:tAyTAyZ4AyTAyZeAyTAyZ4Ayh
- TLSH T195E78C17F6A841F5D07AD074C6969676EA727C420B309ACF0394F7192E33AE09F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry