General
- Target 2026-08-01_1ec045f1de8e24165a467aeacef02739_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_stealc_vidar
- Size 54.9MB
- Sample260802-bkes7a1flg
- SHA256 f7b2b6c386f773a62ba6adc3e0c5742e76f5e768fa610f125da338a9f2da3fd5
- MD5 1ec045f1de8e24165a467aeacef02739
- SHA1 b637b9400da5ea115f01080fe99cabc76925ac25
- SHA512 8c693bc564638f50cb682de6bbef7c0e54efd2905a97dddbf6d8cd0f5b89ca4f965114a039e51190309880f9012579e98eb62e7a11277a2e9093b06e84676641
- SSDEEP 393216:SUEtQevvqc2W1cpV2XI32hUEtQevvqc2W1cL:NE8c23pV2X+xE8c23L
- TLSH T1ECC76B91F6E443F2D26AD434C5B68276FA727C091B3187AB42B5F62E1F372905D39322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_1ec045f1de8e24165a467aeacef02739_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_1ec045f1de8e24165a467aeacef02739_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_1ec045f1de8e24165a467aeacef02739_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_stealc_vidar
- Size 54.9MB
- SHA256 f7b2b6c386f773a62ba6adc3e0c5742e76f5e768fa610f125da338a9f2da3fd5
- MD5 1ec045f1de8e24165a467aeacef02739
- SHA1 b637b9400da5ea115f01080fe99cabc76925ac25
- SHA512 8c693bc564638f50cb682de6bbef7c0e54efd2905a97dddbf6d8cd0f5b89ca4f965114a039e51190309880f9012579e98eb62e7a11277a2e9093b06e84676641
- SSDEEP 393216:SUEtQevvqc2W1cpV2XI32hUEtQevvqc2W1cL:NE8c23pV2X+xE8c23L
- TLSH T1ECC76B91F6E443F2D26AD434C5B68276FA727C091B3187AB42B5F62E1F372905D39322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry