General
- Target 2026-08-05_8bb2d182e2a0aaae8540463ebeb0410a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 65.8MB
- Sample260805-df2hhaak3s
- SHA256 86845fed66286e9c80092a266d388e0957c229db38cae04fb87d4018f96d1e4c
- MD5 8bb2d182e2a0aaae8540463ebeb0410a
- SHA1 fc7a78dca921581744a335363fadfb0eaca0d4a2
- SHA512 cde7c530ab1b448676718591f6e77d0c96280bae09b26f5454f4f6305724f05b65f77bc54dbdd84aad4f5e6fff7aecbc2952e4ff9dc4dfa5a8ec01a03b33c4ee
- SSDEEP 1572864:uZ/K0ttYREqTmZ/K0ttYREqTPrZ/K0ttYREqTmZ/K0ttYREqTPfEh2ZV2XG:5RE+REa+RE+REa/
- TLSH T139E76B12B6E443E6E266D134CAB28271EB717C4D4BB192FF2174B2991E336D07E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_8bb2d182e2a0aaae8540463ebeb0410a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_8bb2d182e2a0aaae8540463ebeb0410a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_8bb2d182e2a0aaae8540463ebeb0410a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 65.8MB
- SHA256 86845fed66286e9c80092a266d388e0957c229db38cae04fb87d4018f96d1e4c
- MD5 8bb2d182e2a0aaae8540463ebeb0410a
- SHA1 fc7a78dca921581744a335363fadfb0eaca0d4a2
- SHA512 cde7c530ab1b448676718591f6e77d0c96280bae09b26f5454f4f6305724f05b65f77bc54dbdd84aad4f5e6fff7aecbc2952e4ff9dc4dfa5a8ec01a03b33c4ee
- SSDEEP 1572864:uZ/K0ttYREqTmZ/K0ttYREqTPrZ/K0ttYREqTmZ/K0ttYREqTPfEh2ZV2XG:5RE+REa+RE+REa/
- TLSH T139E76B12B6E443E6E266D134CAB28271EB717C4D4BB192FF2174B2991E336D07E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry