General
- Target 2026-08-05_9255986b86c664187cda286e8d5ac437_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 9.0MB
- Sample260805-j9vvpscn81
- SHA256 a1cfffcac91b2b5e3b428719d440fe4832ae9ea0f08f68781f25a5706c94b83b
- MD5 9255986b86c664187cda286e8d5ac437
- SHA1 47d7e6579d03e69760a741aa70d37a2950e43116
- SHA512 2bcc5fd0ad1c69de6fea36de6ef7a5078a554ffa8dd223503394e4f2c70a6fb174391a384553db33f0f1029ca05c0d7dc38a05fc2494ad25011382631ab0ce41
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+Tu5x6M1c/h1+nu5x6M1c/h1+8u5x6M1VezSC6v2+:Jw/h1+Qw/h1+cw/h1+Qw/h1+v+
- TLSH T19F965B51F5A48272D0B68471C6D6A77AFA3378411B308BC79386DB3C2F272D19A36736
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_9255986b86c664187cda286e8d5ac437_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_9255986b86c664187cda286e8d5ac437_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_9255986b86c664187cda286e8d5ac437_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 9.0MB
- SHA256 a1cfffcac91b2b5e3b428719d440fe4832ae9ea0f08f68781f25a5706c94b83b
- MD5 9255986b86c664187cda286e8d5ac437
- SHA1 47d7e6579d03e69760a741aa70d37a2950e43116
- SHA512 2bcc5fd0ad1c69de6fea36de6ef7a5078a554ffa8dd223503394e4f2c70a6fb174391a384553db33f0f1029ca05c0d7dc38a05fc2494ad25011382631ab0ce41
- SSDEEP 98304:Su5x6M1c/h1+nu5x6M1c/h1+Tu5x6M1c/h1+nu5x6M1c/h1+8u5x6M1VezSC6v2+:Jw/h1+Qw/h1+cw/h1+Qw/h1+v+
- TLSH T19F965B51F5A48272D0B68471C6D6A77AFA3378411B308BC79386DB3C2F272D19A36736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry