General
- Target 2026-08-02_d36fd94748ac1c6722f1dc84319e11e4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 53.1MB
- Sample260802-3maqssgr7y
- SHA256 e98d5ec7cc96322bee6eacd92dc1913b0eb9e7fb2b0ddda7d27cf138851e5d2e
- MD5 d36fd94748ac1c6722f1dc84319e11e4
- SHA1 fad4b947ae23b36a0e87c0ca5d43d855126da635
- SHA512 06c5f8dc98a7b65070c6714695f5b2f4deff8a3a562ecd0b1ed7ff63478bfc792018a7cf6fad8dcf64c995ff270760914ba66c4aff465c209d5cdc0eaf978588
- SSDEEP 393216:I5G+ob5G+oo5G+ob5G+ogE5G+ob5G+oo5G+ob5G+ogS:I47b47o47b47H47b47o47b47n
- TLSH T131C76B16B6E440E5C1AAC134CF568632E7B17C294FF097EB6255B2C92E33AD07E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_d36fd94748ac1c6722f1dc84319e11e4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_d36fd94748ac1c6722f1dc84319e11e4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_d36fd94748ac1c6722f1dc84319e11e4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 53.1MB
- SHA256 e98d5ec7cc96322bee6eacd92dc1913b0eb9e7fb2b0ddda7d27cf138851e5d2e
- MD5 d36fd94748ac1c6722f1dc84319e11e4
- SHA1 fad4b947ae23b36a0e87c0ca5d43d855126da635
- SHA512 06c5f8dc98a7b65070c6714695f5b2f4deff8a3a562ecd0b1ed7ff63478bfc792018a7cf6fad8dcf64c995ff270760914ba66c4aff465c209d5cdc0eaf978588
- SSDEEP 393216:I5G+ob5G+oo5G+ob5G+ogE5G+ob5G+oo5G+ob5G+ogS:I47b47o47b47H47b47o47b47n
- TLSH T131C76B16B6E440E5C1AAC134CF568632E7B17C294FF097EB6255B2C92E33AD07E3A711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry