General
- Target 2026-08-06_0d8b3795b8a38e6c7c5b9453d49cf829_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_vidar
- Size 61.6MB
- Sample260806-w2k2rabg23
- SHA256 02ae680d355816e93dd8cf67236d4be56fa7eee8cd59f49d56d4116d14dbc6e1
- MD5 0d8b3795b8a38e6c7c5b9453d49cf829
- SHA1 d7737f6fcb0c6c3ee207435f2ea1f7ad75f60f1f
- SHA512 2740ed5f29ff8e2686eefe5fe94e03e858ab85ec7e6d6e805f0013b450fd46d533659a39b19efee97a93aae77c77c5deb42a6ce4fe4a14cc4682236a20a856a8
- SSDEEP 393216:2c7cSc7c9c7cSc7ckc7cSc7cbgc7cSc7c9c7cSc7ckc7cSc7cbEj:tYRY2YRY/YRYnYRY2YRY/YRYi
- TLSH T160E78C17E69440F5D16E993087AA9332FA73B8120B7197CB53A4C62D1F336D06E3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_0d8b3795b8a38e6c7c5b9453d49cf829_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_0d8b3795b8a38e6c7c5b9453d49cf829_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_0d8b3795b8a38e6c7c5b9453d49cf829_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_vidar
- Size 61.6MB
- SHA256 02ae680d355816e93dd8cf67236d4be56fa7eee8cd59f49d56d4116d14dbc6e1
- MD5 0d8b3795b8a38e6c7c5b9453d49cf829
- SHA1 d7737f6fcb0c6c3ee207435f2ea1f7ad75f60f1f
- SHA512 2740ed5f29ff8e2686eefe5fe94e03e858ab85ec7e6d6e805f0013b450fd46d533659a39b19efee97a93aae77c77c5deb42a6ce4fe4a14cc4682236a20a856a8
- SSDEEP 393216:2c7cSc7c9c7cSc7ckc7cSc7cbgc7cSc7c9c7cSc7ckc7cSc7cbEj:tYRY2YRY/YRYnYRY2YRY/YRYi
- TLSH T160E78C17E69440F5D16E993087AA9332FA73B8120B7197CB53A4C62D1F336D06E3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry