General
- Target 2026-08-05_79538a59a993f297fdd79f30913a818f_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_remcos_smoke-loader_vidar
- Size 7.8MB
- Sample260805-wt77baytev
- SHA256 add0ca0ffea77c580dabb7611bfebc54edbca3cba61ea627cff180136ef24cda
- MD5 79538a59a993f297fdd79f30913a818f
- SHA1 24b71ada7902d070468d45079c1e03b539dca4cf
- SHA512 6771acca2fb698a93d6f92968f82796511de485a0f6c07807546b245df16609075b4ca0e31533613e57350ad9bb0493e1a0ea95700ea677dbf240002eb43b5ee
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1lu5x6M1wu5x6M1Ku5x6M1wu5x6M18:nPdPePdPQ
- TLSH T1DB868E13FA91C4F2C7791D30056AA736AB36AA110B15DBC7D364CA5D6D332C0AE3663B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_79538a59a993f297fdd79f30913a818f_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_79538a59a993f297fdd79f30913a818f_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_79538a59a993f297fdd79f30913a818f_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_remcos_smoke-loader_vidar
- Size 7.8MB
- SHA256 add0ca0ffea77c580dabb7611bfebc54edbca3cba61ea627cff180136ef24cda
- MD5 79538a59a993f297fdd79f30913a818f
- SHA1 24b71ada7902d070468d45079c1e03b539dca4cf
- SHA512 6771acca2fb698a93d6f92968f82796511de485a0f6c07807546b245df16609075b4ca0e31533613e57350ad9bb0493e1a0ea95700ea677dbf240002eb43b5ee
- SSDEEP 98304:Uu5x6M1wu5x6M1Ku5x6M1wu5x6M1lu5x6M1wu5x6M1Ku5x6M1wu5x6M18:nPdPePdPQ
- TLSH T1DB868E13FA91C4F2C7791D30056AA736AB36AA110B15DBC7D364CA5D6D332C0AE3663B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry