General
- Target 2026-08-03_7629870fddb6cdbab4c5abb6beee2f86_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 53.5MB
- Sample260804-nee8zsdm6t
- SHA256 0c6861b7f345c04d24f96029c7137f5ce0a875cea1438c7d371193bca82b94b8
- MD5 7629870fddb6cdbab4c5abb6beee2f86
- SHA1 8aefebb4254416585a251ae331122e6aff068612
- SHA512 08642704ee1e485428700298746a114b13ee6344164ebb503ede48194e9e0de245d07925eea24d619dac1f91e390535ef92d364818b4605d0637e3604ec7e9b0
- SSDEEP 393216:2cD2cDIEU8IBJ4cD2cDIEU8IBJxcD2cDIEU8IBJ4cD2cDIEU8IBJkG:tZMz7ZMzCZMz7ZMzD
- TLSH T116C79E16F6A440F5D1BAC53485A69236E772BC120B318BCB53A4F66D1F337D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_7629870fddb6cdbab4c5abb6beee2f86_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_7629870fddb6cdbab4c5abb6beee2f86_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_7629870fddb6cdbab4c5abb6beee2f86_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 53.5MB
- SHA256 0c6861b7f345c04d24f96029c7137f5ce0a875cea1438c7d371193bca82b94b8
- MD5 7629870fddb6cdbab4c5abb6beee2f86
- SHA1 8aefebb4254416585a251ae331122e6aff068612
- SHA512 08642704ee1e485428700298746a114b13ee6344164ebb503ede48194e9e0de245d07925eea24d619dac1f91e390535ef92d364818b4605d0637e3604ec7e9b0
- SSDEEP 393216:2cD2cDIEU8IBJ4cD2cDIEU8IBJxcD2cDIEU8IBJ4cD2cDIEU8IBJkG:tZMz7ZMzCZMz7ZMzD
- TLSH T116C79E16F6A440F5D1BAC53485A69236E772BC120B318BCB53A4F66D1F337D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry