General
- Target 2026-08-03_c59f73a1c595d916e2debd4b464e3c7a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 15.1MB
- Sample260804-lt13wscl71
- SHA256 6a29e2189f489e4979808229e1c8a0dfb8e4eec84afed8bdb6c0149b64643493
- MD5 c59f73a1c595d916e2debd4b464e3c7a
- SHA1 30dc9e80b003d2beea6518b8e15b2cffa33b5290
- SHA512 3deba2d9de8679bc277c5ecfa6d8412b6a088364717cdfd455fee9e1f273938643a021720982a3af5e93ce04167088deffc1a0a305c8e45e14e8d27b225ad019
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAATbw/h1+Qw/h1+WWyZ/K0ttYVAATiD:syZ/K0ttYZTyyZ/K0ttYZTiD
- TLSH T16FF68D13F5E441B5E0AAD174CA669732EB327C464BB196CF2240B7D42E37AD0BB39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_c59f73a1c595d916e2debd4b464e3c7a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_c59f73a1c595d916e2debd4b464e3c7a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_c59f73a1c595d916e2debd4b464e3c7a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 15.1MB
- SHA256 6a29e2189f489e4979808229e1c8a0dfb8e4eec84afed8bdb6c0149b64643493
- MD5 c59f73a1c595d916e2debd4b464e3c7a
- SHA1 30dc9e80b003d2beea6518b8e15b2cffa33b5290
- SHA512 3deba2d9de8679bc277c5ecfa6d8412b6a088364717cdfd455fee9e1f273938643a021720982a3af5e93ce04167088deffc1a0a305c8e45e14e8d27b225ad019
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAATbw/h1+Qw/h1+WWyZ/K0ttYVAATiD:syZ/K0ttYZTyyZ/K0ttYZTiD
- TLSH T16FF68D13F5E441B5E0AAD174CA669732EB327C464BB196CF2240B7D42E37AD0BB39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application