General
- Target 2026-08-04_77d99cbc6fe23d564c12066356186761_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 21.4MB
- Sample260804-2qg4lsscmc
- SHA256 dbf1223a5b2c3d95cf8669dd70d3bc709c8f2e4bf95adbd58913e2d2f2004a33
- MD5 77d99cbc6fe23d564c12066356186761
- SHA1 cb698557fd2664a9fcd7f7455f7a14517d308014
- SHA512 7b9209c12a6413d6ddb70a93e166528c7476259cba423c58c992aafed406e1730ba5555a6538231bcec530031682722eb8e8f6bf3abcbe5d1f85098b9185a61a
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09oi8SWyZ/K0ttYVAAT1Kmd09oinoK:zyZ/K0ttYZTEqT7yZ/K0ttYZTEqTao
- TLSH T1ED377D13F2E441A9E0A6D174CE669631EB327C494BF1A5DF2240B7D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_77d99cbc6fe23d564c12066356186761_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_77d99cbc6fe23d564c12066356186761_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_77d99cbc6fe23d564c12066356186761_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 21.4MB
- SHA256 dbf1223a5b2c3d95cf8669dd70d3bc709c8f2e4bf95adbd58913e2d2f2004a33
- MD5 77d99cbc6fe23d564c12066356186761
- SHA1 cb698557fd2664a9fcd7f7455f7a14517d308014
- SHA512 7b9209c12a6413d6ddb70a93e166528c7476259cba423c58c992aafed406e1730ba5555a6538231bcec530031682722eb8e8f6bf3abcbe5d1f85098b9185a61a
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09oi8SWyZ/K0ttYVAAT1Kmd09oinoK:zyZ/K0ttYZTEqT7yZ/K0ttYZTEqTao
- TLSH T1ED377D13F2E441A9E0A6D174CE669631EB327C494BF1A5DF2240B7D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application