General
- Target 2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 49.2MB
- Sample260804-1y5n7seq5x
- SHA256 8f7078a42e6596a10802c5410631e7c2691027084fe2229726d302b7321b6871
- MD5 f1eb105c386ac007a62d1d84b8b69e0d
- SHA1 fa6b2486b62632af4c7a5c42638b242314e022c3
- SHA512 e3043c45aea312700bd24c0b97fd705348bc495da4d73560e2fdb70d54896967f5b22fa5f074e1e2cd0713a22a31040ca6341f0ebdf8f5fcb6566dc28bd2b225
- SSDEEP 393216:2cD2cDIEU8IBJ4cD2cDIEU8IBJeUEtQevvqc2W1cpV2XI32i:tZMz7ZMzpE8c23pV2X+T
- TLSH T128B76B52B6E443E2D36A953485B68272EB71BC1E1B3197FB0278F21E1E336D05E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_f1eb105c386ac007a62d1d84b8b69e0d_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 49.2MB
- SHA256 8f7078a42e6596a10802c5410631e7c2691027084fe2229726d302b7321b6871
- MD5 f1eb105c386ac007a62d1d84b8b69e0d
- SHA1 fa6b2486b62632af4c7a5c42638b242314e022c3
- SHA512 e3043c45aea312700bd24c0b97fd705348bc495da4d73560e2fdb70d54896967f5b22fa5f074e1e2cd0713a22a31040ca6341f0ebdf8f5fcb6566dc28bd2b225
- SSDEEP 393216:2cD2cDIEU8IBJ4cD2cDIEU8IBJeUEtQevvqc2W1cpV2XI32i:tZMz7ZMzpE8c23pV2X+T
- TLSH T128B76B52B6E443E2D36A953485B68272EB71BC1E1B3197FB0278F21E1E336D05E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry