General
- Target 2026-08-03_40470eda74a54ebc9b225c198b435133_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 30.3MB
- Sample260804-pgjjvsem2w
- SHA256 2b7788e6c19e40c9441578268f5a9ba9073befaf08d7e820f9df6dd988145599
- MD5 40470eda74a54ebc9b225c198b435133
- SHA1 71afa4c2e474a2caf5fbaadc6b239ebdda46ccd6
- SHA512 81387b1756383912c99674f9799c71857472850533dc57518921e15c1fb92ceb41eae97f112961d0a17c1c91aa9ed7e2a5c4863e24af8af07a573e5c3b5dd9df
- SSDEEP 786432:syZ/K0ttYZTyyZ/K0ttYZTtyZ/K0ttYZTyyZ/K0ttYZTz:3Z/K0ttYR5Z/K0ttYREZ/K0ttYR5Z/Kt
- TLSH T1D0678D13F5E441B5E0AAD174CA669732EB327C464BB196CF2240B7D42E37AD0BB39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_40470eda74a54ebc9b225c198b435133_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_40470eda74a54ebc9b225c198b435133_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_40470eda74a54ebc9b225c198b435133_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 30.3MB
- SHA256 2b7788e6c19e40c9441578268f5a9ba9073befaf08d7e820f9df6dd988145599
- MD5 40470eda74a54ebc9b225c198b435133
- SHA1 71afa4c2e474a2caf5fbaadc6b239ebdda46ccd6
- SHA512 81387b1756383912c99674f9799c71857472850533dc57518921e15c1fb92ceb41eae97f112961d0a17c1c91aa9ed7e2a5c4863e24af8af07a573e5c3b5dd9df
- SSDEEP 786432:syZ/K0ttYZTyyZ/K0ttYZTtyZ/K0ttYZTyyZ/K0ttYZTz:3Z/K0ttYR5Z/K0ttYREZ/K0ttYR5Z/Kt
- TLSH T1D0678D13F5E441B5E0AAD174CA669732EB327C464BB196CF2240B7D42E37AD0BB39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry