General
- Target 2026-08-01_50e06de3dab81fe06d42478c492d620a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 33.2MB
- Sample260802-a4fdds1cmb
- SHA256 d6ea368e58cb851ae394b2de223d14fbc1c1ee9e414b0fa2d7ea7fd50ebd7351
- MD5 50e06de3dab81fe06d42478c492d620a
- SHA1 f69a04ef78cfb7ab09dcdc86f5f3e5e7cc5052ac
- SHA512 88c84b19a59120fd33c60812dcd0ce337c18c984020b131a29f231706e3e6490178db057fa0230dcf525faf365ee2f157401d588ee32c404d842b48d3ba13fc0
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vbe8Vb618U68Vb618US18Ufh8Vbd8Vb618U68Vb6h:2cDcy+JcDcy+YcDcy+JcDcy+n
- TLSH T1F0779D17F69440F5D17A99308A659332EA72BC520B319BCF43A4F6192F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_50e06de3dab81fe06d42478c492d620a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_50e06de3dab81fe06d42478c492d620a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_50e06de3dab81fe06d42478c492d620a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 33.2MB
- SHA256 d6ea368e58cb851ae394b2de223d14fbc1c1ee9e414b0fa2d7ea7fd50ebd7351
- MD5 50e06de3dab81fe06d42478c492d620a
- SHA1 f69a04ef78cfb7ab09dcdc86f5f3e5e7cc5052ac
- SHA512 88c84b19a59120fd33c60812dcd0ce337c18c984020b131a29f231706e3e6490178db057fa0230dcf525faf365ee2f157401d588ee32c404d842b48d3ba13fc0
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vbe8Vb618U68Vb618US18Ufh8Vbd8Vb618U68Vb6h:2cDcy+JcDcy+YcDcy+JcDcy+n
- TLSH T1F0779D17F69440F5D17A99308A659332EA72BC520B319BCF43A4F6192F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry