General
- Target 2026-08-06_c005c1e69a57f6af0aa615e828f0111c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_stealc_vidar
- Size 30.6MB
- Sample260806-x2caaayfnh
- SHA256 b442ce13a03623796a24977b3cdaab26c74e0a35af5d2bcc1db0c9e73afac021
- MD5 c005c1e69a57f6af0aa615e828f0111c
- SHA1 822bebcb9608592873d9bcab0fdb9326ab424e7f
- SHA512 1aac5fc78793ccb83fabfa6968aeca20cc443aaafee25b0e5efe3b3903812e6b81f14c696bf6a299f9a92f77a0fe28b9b3e9855f83bb610fe41b3f94749c7469
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+NUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:UUEtQevvqc2W1cpV2XI32i
- TLSH T1D1675A91B6E483E2E3AA953485B182B6FB717C0E1F31977B4179F22E1F372905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-06_c005c1e69a57f6af0aa615e828f0111c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_c005c1e69a57f6af0aa615e828f0111c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_c005c1e69a57f6af0aa615e828f0111c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_stealc_vidar
- Size 30.6MB
- SHA256 b442ce13a03623796a24977b3cdaab26c74e0a35af5d2bcc1db0c9e73afac021
- MD5 c005c1e69a57f6af0aa615e828f0111c
- SHA1 822bebcb9608592873d9bcab0fdb9326ab424e7f
- SHA512 1aac5fc78793ccb83fabfa6968aeca20cc443aaafee25b0e5efe3b3903812e6b81f14c696bf6a299f9a92f77a0fe28b9b3e9855f83bb610fe41b3f94749c7469
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+NUEtQeTbvf2zlO12sJTv6Ja1cpVLyXIldPlbuJHi:UUEtQevvqc2W1cpV2XI32i
- TLSH T1D1675A91B6E483E2E3AA953485B182B6FB717C0E1F31977B4179F22E1F372905D25322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application