General
- Target 2026-08-04_2f1f70c096d1b5d6805410ba12faa807_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 29.7MB
- Sample260804-27c6zssgkc
- SHA256 2587b53dbc38b6a7e82b7a2e2c77f21d569f403878d620b4015f7c02b75eccac
- MD5 2f1f70c096d1b5d6805410ba12faa807
- SHA1 6c5ccc8441b22a7607d637d566ce656ff69249b3
- SHA512 3605907985b21080553dc39342a3a475dcde5ca24e2a430d37387bddf54463e60c3bd543f6ba5782f7958fe51017b9fd60292ec9e9905556cf787cfa85733864
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCi8Vb618U68Vb618Ul8Vb618U68Vb61y:2cDcKcDcO3cDcKcDcO8KDcDi
- TLSH T1E2677C17F6A444F5D16E98308BA69231EA72BC110B7197CB43A4F62D1F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_2f1f70c096d1b5d6805410ba12faa807_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_2f1f70c096d1b5d6805410ba12faa807_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_2f1f70c096d1b5d6805410ba12faa807_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 29.7MB
- SHA256 2587b53dbc38b6a7e82b7a2e2c77f21d569f403878d620b4015f7c02b75eccac
- MD5 2f1f70c096d1b5d6805410ba12faa807
- SHA1 6c5ccc8441b22a7607d637d566ce656ff69249b3
- SHA512 3605907985b21080553dc39342a3a475dcde5ca24e2a430d37387bddf54463e60c3bd543f6ba5782f7958fe51017b9fd60292ec9e9905556cf787cfa85733864
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCi8Vb618U68Vb618Ul8Vb618U68Vb61y:2cDcKcDcO3cDcKcDcO8KDcDi
- TLSH T1E2677C17F6A444F5D16E98308BA69231EA72BC110B7197CB43A4F62D1F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry