General
- Target 2026-08-04_f397328dae0bba9c5a5b95aba540ea1e_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 51.4MB
- Sample260804-1ys1ea1eqc
- SHA256 3e46c7454e998ef457b48e0bcc0add0c73b0697d6ebe8b329ab5085eafdf86b2
- MD5 f397328dae0bba9c5a5b95aba540ea1e
- SHA1 e3120e8c80c6e6e068d777ae170249955c97d58c
- SHA512 87ca968047507f14abc8b868a6e93c812294171016afbcff87889c91e0673140b811b7dbfc98116b5c50f6bf94f78ce7c3318271181e13a14be8370db85e2453
- SSDEEP 393216:2cD2cDIEU8IBJ4cD2cDIEU8IBJxcD2cDIEU8IBJ4cD2cDIEU8IBJl:tZMz7ZMzCZMz7ZMzl
- TLSH T11DC7AE17F6A440F5D17A953485A69232EB72BC120B318BCB53A4F6691F337D09F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_f397328dae0bba9c5a5b95aba540ea1e_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_f397328dae0bba9c5a5b95aba540ea1e_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_f397328dae0bba9c5a5b95aba540ea1e_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 51.4MB
- SHA256 3e46c7454e998ef457b48e0bcc0add0c73b0697d6ebe8b329ab5085eafdf86b2
- MD5 f397328dae0bba9c5a5b95aba540ea1e
- SHA1 e3120e8c80c6e6e068d777ae170249955c97d58c
- SHA512 87ca968047507f14abc8b868a6e93c812294171016afbcff87889c91e0673140b811b7dbfc98116b5c50f6bf94f78ce7c3318271181e13a14be8370db85e2453
- SSDEEP 393216:2cD2cDIEU8IBJ4cD2cDIEU8IBJxcD2cDIEU8IBJ4cD2cDIEU8IBJl:tZMz7ZMzCZMz7ZMzl
- TLSH T11DC7AE17F6A440F5D17A953485A69232EB72BC120B318BCB53A4F6691F337D09F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry