General
- Target 2026-08-04_98dc90e53c56359076240fb096f38374_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 56.2MB
- Sample260804-2ht37ssbjh
- SHA256 607e711cb7354a699123503963ef1bd89bdc70b735e94304edcd14ac9df24b5d
- MD5 98dc90e53c56359076240fb096f38374
- SHA1 0d219daceb1b3872047550e3fe018dc14dccd878
- SHA512 f20dc4fd77af000c6291cf12f4bec72e87be67a30008941051b285588e54475efa51a0abbf726b6774cfe71bd2dfa27f262e779b7ec0b4a8edc2cba967aff4dc
- SSDEEP 393216:2cDcKcDcO3cDcKcDcO8KDcDzcDcKcDcO3cDcKcDcO8KDcM:tAJA7AJAwAcAJA7AJAwAM
- TLSH T15CD77B17F6A540F5D16E95308B668232EA72BC120B7197CB43A4F62D1F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_98dc90e53c56359076240fb096f38374_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_98dc90e53c56359076240fb096f38374_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_98dc90e53c56359076240fb096f38374_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 56.2MB
- SHA256 607e711cb7354a699123503963ef1bd89bdc70b735e94304edcd14ac9df24b5d
- MD5 98dc90e53c56359076240fb096f38374
- SHA1 0d219daceb1b3872047550e3fe018dc14dccd878
- SHA512 f20dc4fd77af000c6291cf12f4bec72e87be67a30008941051b285588e54475efa51a0abbf726b6774cfe71bd2dfa27f262e779b7ec0b4a8edc2cba967aff4dc
- SSDEEP 393216:2cDcKcDcO3cDcKcDcO8KDcDzcDcKcDcO3cDcKcDcO8KDcM:tAJA7AJAwAcAJA7AJAwAM
- TLSH T15CD77B17F6A540F5D16E95308B668232EA72BC120B7197CB43A4F62D1F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry