General
- Target 2026-08-05_57c36f82c94c6131cdecdd75e195fcd6_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_remcos_smoke-loader_vidar
- Size 9.6MB
- Sample260805-w6k8batdnc
- SHA256 19a043341580df27fe9e8e631d94eafa94c7e147f767397eaa35363bc9bf1698
- MD5 57c36f82c94c6131cdecdd75e195fcd6
- SHA1 0666b52870d30a5230831dbe894af56022af6a92
- SHA512 197ffee6649a83e6c31c76364b2e9c754e101c790ca512284f54053465208d3658396ee2cf81c8d157845c5f3c480a55d9d0105c33ff5b731572229b803e9a27
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1lu5x6M1wu5x6M1Ku5x6M1wu5x6M10oq2Vjnm:nPdPePdPwGn
- TLSH T18BA69F16FA94C0F2C7BA4D30056A9776E736B9110B25DBC7D364CA1D2D336D0AE3A236
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_57c36f82c94c6131cdecdd75e195fcd6_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_57c36f82c94c6131cdecdd75e195fcd6_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_57c36f82c94c6131cdecdd75e195fcd6_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_remcos_smoke-loader_vidar
- Size 9.6MB
- SHA256 19a043341580df27fe9e8e631d94eafa94c7e147f767397eaa35363bc9bf1698
- MD5 57c36f82c94c6131cdecdd75e195fcd6
- SHA1 0666b52870d30a5230831dbe894af56022af6a92
- SHA512 197ffee6649a83e6c31c76364b2e9c754e101c790ca512284f54053465208d3658396ee2cf81c8d157845c5f3c480a55d9d0105c33ff5b731572229b803e9a27
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1lu5x6M1wu5x6M1Ku5x6M1wu5x6M10oq2Vjnm:nPdPePdPwGn
- TLSH T18BA69F16FA94C0F2C7BA4D30056A9776E736B9110B25DBC7D364CA1D2D336D0AE3A236
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry