General
- Target 2026-08-04_e94b5d4f45fa50ad0f1d6b6f314899f0_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 37.3MB
- Sample260804-11qm3a1fjg
- SHA256 dcde67a55eb6f9a786db6f26f22f709b5e9a3986bb5f16daec765e5378ee7038
- MD5 e94b5d4f45fa50ad0f1d6b6f314899f0
- SHA1 ac4e308b512372a56ea55ac94ed0d19485c8e11c
- SHA512 51f7719bd2c466924e5f13715c4bd6b052b76359bd8e7be2076147dfd4bacade2cbb6b57e721df07f6a90b98fbca2fd07c30c541aaf4120023fb96b65b75171d
- SSDEEP 393216:2cD2cDIEU8IBJtWqQjpmcD2cDIEU8IBJtWqQjp6WqQjpO:tZMz4fjp9ZMz4fjpFfjpO
- TLSH T1FA879D13F6E840E8E0AAD57486669332EA72BC525B3197CF0354F6291F73AD05F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_e94b5d4f45fa50ad0f1d6b6f314899f0_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_e94b5d4f45fa50ad0f1d6b6f314899f0_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_e94b5d4f45fa50ad0f1d6b6f314899f0_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 37.3MB
- SHA256 dcde67a55eb6f9a786db6f26f22f709b5e9a3986bb5f16daec765e5378ee7038
- MD5 e94b5d4f45fa50ad0f1d6b6f314899f0
- SHA1 ac4e308b512372a56ea55ac94ed0d19485c8e11c
- SHA512 51f7719bd2c466924e5f13715c4bd6b052b76359bd8e7be2076147dfd4bacade2cbb6b57e721df07f6a90b98fbca2fd07c30c541aaf4120023fb96b65b75171d
- SSDEEP 393216:2cD2cDIEU8IBJtWqQjpmcD2cDIEU8IBJtWqQjp6WqQjpO:tZMz4fjp9ZMz4fjpFfjpO
- TLSH T1FA879D13F6E840E8E0AAD57486669332EA72BC525B3197CF0354F6291F73AD05F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry