General
- Target 2026-08-04_1be7c6c6129d43851bcc8e43405caa40_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 16.0MB
- Sample260804-zv8q1sysax
- SHA256 c9d18c80fbd3bc42bcdf0af7046346261187d6d9494ab0f73cec63d4058979aa
- MD5 1be7c6c6129d43851bcc8e43405caa40
- SHA1 7478beaf9e56e6e07975e894ba819a4bc776b835
- SHA512 69059827bbf5e44db1a84f5c8b2b74c3fe8c0171313aed1ccea8e6023e19b1dfea385ab3df9ef4d3ae3573f85ed77b3167661b82aca1872f556a639b55ffcc88
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vKw/h1+Qw/h1+cw/h1+Qw/h1+v7b:K
- TLSH T1D4075B91F5A08172D17A8471C696A77AFA337D411B208BC79386DB3C2F272C19A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-04_1be7c6c6129d43851bcc8e43405caa40_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_1be7c6c6129d43851bcc8e43405caa40_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_1be7c6c6129d43851bcc8e43405caa40_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 16.0MB
- SHA256 c9d18c80fbd3bc42bcdf0af7046346261187d6d9494ab0f73cec63d4058979aa
- MD5 1be7c6c6129d43851bcc8e43405caa40
- SHA1 7478beaf9e56e6e07975e894ba819a4bc776b835
- SHA512 69059827bbf5e44db1a84f5c8b2b74c3fe8c0171313aed1ccea8e6023e19b1dfea385ab3df9ef4d3ae3573f85ed77b3167661b82aca1872f556a639b55ffcc88
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+vKw/h1+Qw/h1+cw/h1+Qw/h1+v7b:K
- TLSH T1D4075B91F5A08172D17A8471C696A77AFA337D411B208BC79386DB3C2F272C19A36737
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry