General
- Target 2026-08-03_5eff4a483e0d891943148dc35ad86647_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 15.1MB
- Sample260804-nv23padp7s
- SHA256 a6544b268bba78e749510c8f0c7f0cbcbc03625270e5b151951a4e702da0d6a6
- MD5 5eff4a483e0d891943148dc35ad86647
- SHA1 5a44ebf1ac8347e01567445b3878c622e8701c19
- SHA512 e732a620bafdc313df97da526b99ad5a309c1e51a5e5780064ba3cdfe645516d35a42263cccae5f88ca188285fc053579d6160908f080c351cf567915f8707e0
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAATbw/h1+Qw/h1+WWyZ/K0ttYVAATL:syZ/K0ttYZTyyZ/K0ttYZTL
- TLSH T1EDF68D13F5E441B5E0AAD174CA669732EB327C464BB196CF2240B7D42E37AD0BB39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_5eff4a483e0d891943148dc35ad86647_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_5eff4a483e0d891943148dc35ad86647_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_5eff4a483e0d891943148dc35ad86647_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 15.1MB
- SHA256 a6544b268bba78e749510c8f0c7f0cbcbc03625270e5b151951a4e702da0d6a6
- MD5 5eff4a483e0d891943148dc35ad86647
- SHA1 5a44ebf1ac8347e01567445b3878c622e8701c19
- SHA512 e732a620bafdc313df97da526b99ad5a309c1e51a5e5780064ba3cdfe645516d35a42263cccae5f88ca188285fc053579d6160908f080c351cf567915f8707e0
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAATbw/h1+Qw/h1+WWyZ/K0ttYVAATL:syZ/K0ttYZTyyZ/K0ttYZTL
- TLSH T1EDF68D13F5E441B5E0AAD174CA669732EB327C464BB196CF2240B7D42E37AD0BB39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry