General
- Target 2026-08-02_f75af954383333faf34593ccac2ff200_amadey_cobalt-strike_darkgate_elex_emotet_hijackloader_luca-stealer_njrat_remcos_smoke-loader_stealc_stop_vidar_wannacry
- Size 5.4MB
- Sample260802-tlgnaastew
- SHA256 16c293dff3ba55a2a69b7c5a524f9d273cd4f5ce217ca369eefded682455cacf
- MD5 f75af954383333faf34593ccac2ff200
- SHA1 14567f32eb976bf67f634929f3b6f47cd3af6d16
- SHA512 9d44e27459ebe537d1537e6114cf4c8c7df2f5371e5c4bcb931d3c3403ca1687bc6ab7dfdb0c5488467f93390b5d14be81d2135269a2b7e51ec4a7ad3a1ca5c2
- SSDEEP 98304:HXTRi0joabpuAXxoWCgPHYgCsTDxQeMjLsAAa/7JNzJwjI5klUigKYkBEC:0+oaGveGZF6bUpMBr
- TLSH T1B146E116F2B44279D077C179C5A6976BEAB2744117309ACB5390CB6D2F33AE25E3A330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-02_f75af954383333faf34593ccac2ff200_amadey_cobalt-strike_darkgate_elex_emotet_hijackloader_l.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_f75af954383333faf34593ccac2ff200_amadey_cobalt-strike_darkgate_elex_emotet_hijackloader_l.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_f75af954383333faf34593ccac2ff200_amadey_cobalt-strike_darkgate_elex_emotet_hijackloader_luca-stealer_njrat_remcos_smoke-loader_stealc_stop_vidar_wannacry
- Size 5.4MB
- SHA256 16c293dff3ba55a2a69b7c5a524f9d273cd4f5ce217ca369eefded682455cacf
- MD5 f75af954383333faf34593ccac2ff200
- SHA1 14567f32eb976bf67f634929f3b6f47cd3af6d16
- SHA512 9d44e27459ebe537d1537e6114cf4c8c7df2f5371e5c4bcb931d3c3403ca1687bc6ab7dfdb0c5488467f93390b5d14be81d2135269a2b7e51ec4a7ad3a1ca5c2
- SSDEEP 98304:HXTRi0joabpuAXxoWCgPHYgCsTDxQeMjLsAAa/7JNzJwjI5klUigKYkBEC:0+oaGveGZF6bUpMBr
- TLSH T1B146E116F2B44279D077C179C5A6976BEAB2744117309ACB5390CB6D2F33AE25E3A330
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory