General
- Target 2026-08-06_280f78db70846dfc1251141867420e94_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 58.4MB
- Sample260806-wwfvvabe38
- SHA256 c7b6273bdd6d633de5efc8f9d559fe5343b373c422cd79f6da09f86c47aade80
- MD5 280f78db70846dfc1251141867420e94
- SHA1 9831bb7eea7f2d054fe5f2fbcb025156c7b38670
- SHA512 f294b5f22c28c0454f670898cca84243e377213eda9bf05413141bb8b3f5e3a4638be93687c81635c4aa21153dc92ebc92132ae481b43038e9ed073b48cdbbfc
- SSDEEP 393216:2cDcy7cDcysUEtQevvqc2W1cpV2XI32KcDcy7cDcysUEtQec:tAyYAy3E8c23pV2X+IAyYAy3EO
- TLSH T192D77B52B6E843E2D26AD43485B68276EB727C0A0B3197FB0275F21E1F376D05E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_280f78db70846dfc1251141867420e94_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_280f78db70846dfc1251141867420e94_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_280f78db70846dfc1251141867420e94_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 58.4MB
- SHA256 c7b6273bdd6d633de5efc8f9d559fe5343b373c422cd79f6da09f86c47aade80
- MD5 280f78db70846dfc1251141867420e94
- SHA1 9831bb7eea7f2d054fe5f2fbcb025156c7b38670
- SHA512 f294b5f22c28c0454f670898cca84243e377213eda9bf05413141bb8b3f5e3a4638be93687c81635c4aa21153dc92ebc92132ae481b43038e9ed073b48cdbbfc
- SSDEEP 393216:2cDcy7cDcysUEtQevvqc2W1cpV2XI32KcDcy7cDcysUEtQec:tAyYAy3E8c23pV2X+IAyYAy3EO
- TLSH T192D77B52B6E843E2D26AD43485B68276EB727C0A0B3197FB0275F21E1F376D05E39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry