General
- Target 2026-08-07_1f73df25048edd7a630abffdff6c6987_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 27.2MB
- Sample260808-b66tssfn9s
- SHA256 79c8fa128ec12240d82f04d13876d77d32811fb7bba44a37a536bcf92563f76f
- MD5 1f73df25048edd7a630abffdff6c6987
- SHA1 aeb85740daa49c21679d0b5bbe249055b462ad36
- SHA512 2cde2c874399818c7a87f59e1dad184dbcec79075e41b746303f6a3be7c205004b25778fd1ce44910aede898186f26abac40f0bc0f3e7d6ce993d6397e99e3ad
- SSDEEP 196608:l8Vb618U68Vb618UbKzQcIzoKFGnFh8Vb618U68Vb618UbKzQcIzoKFGnFc82Vh:2cDc3KR0oyGIcDc3KR0oyGDe
- TLSH T1D3577B26B2E540E4D0AAC534CB568232E7B27C654FB097DF5250B2992F33AD07F3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_1f73df25048edd7a630abffdff6c6987_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_1f73df25048edd7a630abffdff6c6987_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_1f73df25048edd7a630abffdff6c6987_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 27.2MB
- SHA256 79c8fa128ec12240d82f04d13876d77d32811fb7bba44a37a536bcf92563f76f
- MD5 1f73df25048edd7a630abffdff6c6987
- SHA1 aeb85740daa49c21679d0b5bbe249055b462ad36
- SHA512 2cde2c874399818c7a87f59e1dad184dbcec79075e41b746303f6a3be7c205004b25778fd1ce44910aede898186f26abac40f0bc0f3e7d6ce993d6397e99e3ad
- SSDEEP 196608:l8Vb618U68Vb618UbKzQcIzoKFGnFh8Vb618U68Vb618UbKzQcIzoKFGnFc82Vh:2cDc3KR0oyGIcDc3KR0oyGDe
- TLSH T1D3577B26B2E540E4D0AAC534CB568232E7B27C654FB097DF5250B2992F33AD07F3A716
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry