General
- Target 2026-08-02_b5ab64a633e75f67bfbeb70f666c85c3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 40.1MB
- Sample260802-3t31xstfph
- SHA256 4a5aadf16732212567eaaad9a1652d782c06c91985b1fa524dffb5442f8f29eb
- MD5 b5ab64a633e75f67bfbeb70f666c85c3
- SHA1 63a73c021f7914400726da458e90e59e306d219e
- SHA512 0afc8f9733c1064239a499dd6cd47ab874188b88a317157ceecd8da4b5d39a5e6856e6aa3ac15954362e01e27fa37cda6d79caa7f32f83d860e3deb3da0954d5
- SSDEEP 393216:2cDc3KRjcDc3KRpeccDc3KRjcDc3KRpey:tAaRgAaRsXAaRgAaRsy
- TLSH T130976A22B2E240A9D06E9431CF568231D7E27C654FF097DB9250B2992F736D07F3A71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_b5ab64a633e75f67bfbeb70f666c85c3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_b5ab64a633e75f67bfbeb70f666c85c3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_b5ab64a633e75f67bfbeb70f666c85c3_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 40.1MB
- SHA256 4a5aadf16732212567eaaad9a1652d782c06c91985b1fa524dffb5442f8f29eb
- MD5 b5ab64a633e75f67bfbeb70f666c85c3
- SHA1 63a73c021f7914400726da458e90e59e306d219e
- SHA512 0afc8f9733c1064239a499dd6cd47ab874188b88a317157ceecd8da4b5d39a5e6856e6aa3ac15954362e01e27fa37cda6d79caa7f32f83d860e3deb3da0954d5
- SSDEEP 393216:2cDc3KRjcDc3KRpeccDc3KRjcDc3KRpey:tAaRgAaRsXAaRgAaRsy
- TLSH T130976A22B2E240A9D06E9431CF568231D7E27C654FF097DB9250B2992F736D07F3A71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application