General
- Target 2026-08-02_b34d3a52e176b0da75b614522652786a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 66.7MB
- Sample260802-3vfxsatfqe
- SHA256 4b8b3ce9f66e7ac294074c47a55e20cb9dae2324809a9d4c7b707aeaa32fb20d
- MD5 b34d3a52e176b0da75b614522652786a
- SHA1 fef8cb595cba47ac5678d5c27ed35d222c13fd5c
- SHA512 998eb34c94ff363a88230759a62fe21a209e01d723c402d775d94a6eb608a3eb5371ed219347537192ed544cd86c5c9b3ad6ac75881a26c1acca84781baf5c72
- SSDEEP 393216:2cDc3KR0oyGHvyEYKbKcDc3KR0oyGHvyEYKb06cDc3KR0oyGHvyEYKbKcDc3KR03:tAaR9RPbAaR9RPKAaR9RPbAaR9RPe
- TLSH T189E77C22B6E440E5D0AAD134CB668632E7B27C154FB097DF4250F69E2F336D06E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_b34d3a52e176b0da75b614522652786a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_b34d3a52e176b0da75b614522652786a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_b34d3a52e176b0da75b614522652786a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 66.7MB
- SHA256 4b8b3ce9f66e7ac294074c47a55e20cb9dae2324809a9d4c7b707aeaa32fb20d
- MD5 b34d3a52e176b0da75b614522652786a
- SHA1 fef8cb595cba47ac5678d5c27ed35d222c13fd5c
- SHA512 998eb34c94ff363a88230759a62fe21a209e01d723c402d775d94a6eb608a3eb5371ed219347537192ed544cd86c5c9b3ad6ac75881a26c1acca84781baf5c72
- SSDEEP 393216:2cDc3KR0oyGHvyEYKbKcDc3KR0oyGHvyEYKb06cDc3KR0oyGHvyEYKbKcDc3KR03:tAaR9RPbAaR9RPKAaR9RPbAaR9RPe
- TLSH T189E77C22B6E440E5D0AAD134CB668632E7B27C154FB097DF4250F69E2F336D06E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry