General
- Target 2026-08-06_450e95559298421a53a6740ce418859a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 53.1MB
- Sample260806-wpyr3sgk91
- SHA256 fc091a56ffbd6229156bda212568f63ef37598fa49e5bd3614097cc613721416
- MD5 450e95559298421a53a6740ce418859a
- SHA1 9bffd4ba2ea9db7c800c7bcd5c6bda7ec900237d
- SHA512 e7a84ce49baa3d5c9b9d4a954539de7acf451a7be970f6e8c9e6e2f4d3fb6ee1f2910d89574ed3174352ebc4f772b25dab582fdbcb683aeb5b141965e90cdf5a
- SSDEEP 393216:2c7cSc7cHc7cSc7c7WqQjpmc7cSc7cHcVc7cSc7cHc7cSc7c78:tYRY8YRYifjp9YRY8uYRY8YRYQ
- TLSH T11DC78C17E69540F5D16E95308BAA9232FA73BC120B7097CB43A4D62D1F336D06E3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_450e95559298421a53a6740ce418859a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_450e95559298421a53a6740ce418859a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_450e95559298421a53a6740ce418859a_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 53.1MB
- SHA256 fc091a56ffbd6229156bda212568f63ef37598fa49e5bd3614097cc613721416
- MD5 450e95559298421a53a6740ce418859a
- SHA1 9bffd4ba2ea9db7c800c7bcd5c6bda7ec900237d
- SHA512 e7a84ce49baa3d5c9b9d4a954539de7acf451a7be970f6e8c9e6e2f4d3fb6ee1f2910d89574ed3174352ebc4f772b25dab582fdbcb683aeb5b141965e90cdf5a
- SSDEEP 393216:2c7cSc7cHc7cSc7c7WqQjpmc7cSc7cHcVc7cSc7cHc7cSc7c78:tYRY8YRYifjp9YRY8uYRY8YRYQ
- TLSH T11DC78C17E69540F5D16E95308BAA9232FA73BC120B7097CB43A4D62D1F336D06E3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry