General
- Target 2026-08-03_e24cb766e5e0df619537d0cbdd5381eb_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.8MB
- Sample260804-k8my5sssbw
- SHA256 a102efed99ec10d07241da3826c15e660f606669780a3d58962ff12c62ecabf8
- MD5 e24cb766e5e0df619537d0cbdd5381eb
- SHA1 c7fd0cd39f290b89082054e55b881fa372a7af1f
- SHA512 2cac5d280509c2a42a741b3f778c5704bdf8aa258c863255a41d9e74cc790214d71e2e729c0d719f5d0bbafda6739c91c92c82523fe507915523a480442cb4a3
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+yjrOOwH+vV6:2cD2cDxjrOB+Q
- TLSH T189F65B12A6D48EE8D16FD470CA5666729A337C464F319BCF4680BE193E326E05E3532F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_e24cb766e5e0df619537d0cbdd5381eb_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_e24cb766e5e0df619537d0cbdd5381eb_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_e24cb766e5e0df619537d0cbdd5381eb_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 15.8MB
- SHA256 a102efed99ec10d07241da3826c15e660f606669780a3d58962ff12c62ecabf8
- MD5 e24cb766e5e0df619537d0cbdd5381eb
- SHA1 c7fd0cd39f290b89082054e55b881fa372a7af1f
- SHA512 2cac5d280509c2a42a741b3f778c5704bdf8aa258c863255a41d9e74cc790214d71e2e729c0d719f5d0bbafda6739c91c92c82523fe507915523a480442cb4a3
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+yjrOOwH+vV6:2cD2cDxjrOB+Q
- TLSH T189F65B12A6D48EE8D16FD470CA5666729A337C464F319BCF4680BE193E326E05E3532F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry