General
- Target 2026-08-04_9a15ad1a0d5e264952f0d698b3206e70_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 58.2MB
- Sample260804-2hlrtssbjb
- SHA256 7927a07aafce10750df8a43ed99103403eea8f18f8961a58e6600148966be0e2
- MD5 9a15ad1a0d5e264952f0d698b3206e70
- SHA1 4f3bb6bccb93df17b147c705293cd4699a50f9c7
- SHA512 2cbf036605476c210d01b4935afe20f8f8dc2abb48cbf1fb88c930ceaabbf879164b4db5649153d93f662e7a457d8427d053c872ca3e8d64c7b78676866a6d5e
- SSDEEP 393216:2cDcKcDcO3cDcKcDcO8KDcDzcDcKcDcO3cDcKcDcO8KDcD/:tAJA7AJAwAcAJA7AJAwA7
- TLSH T1FAD77C17F6A540F5D16E98308B669231EA72BC120B7197CB43A4F62D1F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_9a15ad1a0d5e264952f0d698b3206e70_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_9a15ad1a0d5e264952f0d698b3206e70_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_9a15ad1a0d5e264952f0d698b3206e70_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 58.2MB
- SHA256 7927a07aafce10750df8a43ed99103403eea8f18f8961a58e6600148966be0e2
- MD5 9a15ad1a0d5e264952f0d698b3206e70
- SHA1 4f3bb6bccb93df17b147c705293cd4699a50f9c7
- SHA512 2cbf036605476c210d01b4935afe20f8f8dc2abb48cbf1fb88c930ceaabbf879164b4db5649153d93f662e7a457d8427d053c872ca3e8d64c7b78676866a6d5e
- SSDEEP 393216:2cDcKcDcO3cDcKcDcO8KDcDzcDcKcDcO3cDcKcDcO8KDcD/:tAJA7AJAwAcAJA7AJAwA7
- TLSH T1FAD77C17F6A540F5D16E98308B669231EA72BC120B7197CB43A4F62D1F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry