General
- Target 2026-08-01_aea8416b78b6904275de4e6bc94a27a8_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar_wannacry
- Size 22.2MB
- Sample260802-abhcaazemd
- SHA256 6d508adb3ed63db0fffdd4d95a27538a07927cbd9fade2283331d385d61bbf05
- MD5 aea8416b78b6904275de4e6bc94a27a8
- SHA1 633449b1847afb2b14700bc92572bf4236ee74ae
- SHA512 41cfc5c5f015fa92e890e43c342ae83fc68a1788476be736121d0d9c90a36d3c404df535e6f83fe09a55107e89c2448d9d90f2b5132f8193c9d61289862e6afc
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+w29w/h1+Qw/h1+cw/h1+Qw/h1+DO:Hj
- TLSH T128375A91F5A08172D17A8471C696A77AFA337C411B608BC79386DB3C2F272C19A76733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_aea8416b78b6904275de4e6bc94a27a8_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_aea8416b78b6904275de4e6bc94a27a8_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_aea8416b78b6904275de4e6bc94a27a8_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar_wannacry
- Size 22.2MB
- SHA256 6d508adb3ed63db0fffdd4d95a27538a07927cbd9fade2283331d385d61bbf05
- MD5 aea8416b78b6904275de4e6bc94a27a8
- SHA1 633449b1847afb2b14700bc92572bf4236ee74ae
- SHA512 41cfc5c5f015fa92e890e43c342ae83fc68a1788476be736121d0d9c90a36d3c404df535e6f83fe09a55107e89c2448d9d90f2b5132f8193c9d61289862e6afc
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+w29w/h1+Qw/h1+cw/h1+Qw/h1+DO:Hj
- TLSH T128375A91F5A08172D17A8471C696A77AFA337C411B608BC79386DB3C2F272C19A76733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application