General
- Target 2026-08-04_89ab890191dc27dd1aff975a9580a67c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 19.9MB
- Sample260804-2lta3sfk7w
- SHA256 317e815e2c79afa0727ec3ad5b65ff4a6b4e07f48c63a6c3ef581e353dcd990a
- MD5 89ab890191dc27dd1aff975a9580a67c
- SHA1 e2acd9d228c7d9250c6e0145c0c441c802cf0251
- SHA512 175edee7587847eca9e70362e9c568efb29b5587656514e8e10060b38723a516ca28be52a17f81ca43dcaaba6f27b6e4726ca0957163f28bb7b5e6b510ed163e
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09oi8SWyZ/K0ttYVAAT1Kmd09oiZb:zyZ/K0ttYZTEqT7yZ/K0ttYZTEqTC
- TLSH T168277D13F2E841A9E0A6D174CE669631EB327C494BF195DF3240B6D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_89ab890191dc27dd1aff975a9580a67c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_89ab890191dc27dd1aff975a9580a67c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_89ab890191dc27dd1aff975a9580a67c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 19.9MB
- SHA256 317e815e2c79afa0727ec3ad5b65ff4a6b4e07f48c63a6c3ef581e353dcd990a
- MD5 89ab890191dc27dd1aff975a9580a67c
- SHA1 e2acd9d228c7d9250c6e0145c0c441c802cf0251
- SHA512 175edee7587847eca9e70362e9c568efb29b5587656514e8e10060b38723a516ca28be52a17f81ca43dcaaba6f27b6e4726ca0957163f28bb7b5e6b510ed163e
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09oi8SWyZ/K0ttYVAAT1Kmd09oiZb:zyZ/K0ttYZTEqT7yZ/K0ttYZTEqTC
- TLSH T168277D13F2E841A9E0A6D174CE669631EB327C494BF195DF3240B6D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application