General
- Target 2026-08-01_46e6703742b93e30571424955318d3ef_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_stealc_vidar
- Size 38.8MB
- Sample260802-a7hypaz1ey
- SHA256 16266141862709b73307164048ca2c6a3d2647321bce68c45fe1c626cce48cc6
- MD5 46e6703742b93e30571424955318d3ef
- SHA1 73380b42bb00f086192978c16c4d06fa9684d672
- SHA512 b7bd93fa8de2bb4ebc101a584dedd396349e9ee30e677f2085a25a6fc049915fe60fca8ff3105677b5834cf8af8301bc1b6562419a2a492861dddabe33c85281
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+wTUEtQeTbvf2zlO12sJTv6Ja1cpk:SUEtQevvqc2W1cpV2XI32r
- TLSH T1D1975B91F6E483E2D36A9434C5B18276FA727C0E1B3197BB4279F62E1F372905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_46e6703742b93e30571424955318d3ef_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_46e6703742b93e30571424955318d3ef_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_46e6703742b93e30571424955318d3ef_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_stealc_vidar
- Size 38.8MB
- SHA256 16266141862709b73307164048ca2c6a3d2647321bce68c45fe1c626cce48cc6
- MD5 46e6703742b93e30571424955318d3ef
- SHA1 73380b42bb00f086192978c16c4d06fa9684d672
- SHA512 b7bd93fa8de2bb4ebc101a584dedd396349e9ee30e677f2085a25a6fc049915fe60fca8ff3105677b5834cf8af8301bc1b6562419a2a492861dddabe33c85281
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+wTUEtQeTbvf2zlO12sJTv6Ja1cpk:SUEtQevvqc2W1cpV2XI32r
- TLSH T1D1975B91F6E483E2D36A9434C5B18276FA727C0E1B3197BB4279F62E1F372905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry