General
- Target 2026-08-01_5d02dc5672e975321c8ca40c043c1ba1_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 22.5MB
- Sample260802-azyn6s1bqe
- SHA256 fa02d03c6b062ddb880312941e7952414850a008fa8a053f7badc5fac1493e1c
- MD5 5d02dc5672e975321c8ca40c043c1ba1
- SHA1 0c4732166ab26c9d3696adbc5ecdeb7bb04a7356
- SHA512 faf71db2884648198adba199671462c30e2fa9264785125de9e2df2b596df08a01e6ae416dfaf32ed4216d822e0795e031a25be4c58482abd71441f9adb3fbcc
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+w29w/h1+Qw/h1+cw/h1+Qw/h1+D8:Hjz
- TLSH T199375A91F5A08172D17A8471C696A77AFA337C411B608BC79386DB3C2F272C19A76733
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_5d02dc5672e975321c8ca40c043c1ba1_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_5d02dc5672e975321c8ca40c043c1ba1_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_5d02dc5672e975321c8ca40c043c1ba1_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 22.5MB
- SHA256 fa02d03c6b062ddb880312941e7952414850a008fa8a053f7badc5fac1493e1c
- MD5 5d02dc5672e975321c8ca40c043c1ba1
- SHA1 0c4732166ab26c9d3696adbc5ecdeb7bb04a7356
- SHA512 faf71db2884648198adba199671462c30e2fa9264785125de9e2df2b596df08a01e6ae416dfaf32ed4216d822e0795e031a25be4c58482abd71441f9adb3fbcc
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+Dw/h1+Qw/h1+w29w/h1+Qw/h1+cw/h1+Qw/h1+D8:Hjz
- TLSH T199375A91F5A08172D17A8471C696A77AFA337C411B608BC79386DB3C2F272C19A76733
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry