General
- Target 2026-08-07_16c4791073e97de194d404af0f0fcec4_amadey_darkgate_elex_emotet_glassworm_hawkeye_icedid_remcos_smoke-loader
- Size 7.3MB
- Sample260808-b9mv4afp4x
- SHA256 a6879132e7fc88184206dd53e04a1b1baf72c53818909be2f0327c40e1ec0fb6
- MD5 16c4791073e97de194d404af0f0fcec4
- SHA1 cbc927836467fd5d69360c95347feca374e4c9cf
- SHA512 d00477c0c118e28afd1cafd0dc3e2af3fe4da66b9a26c4b94d1b950c031bae21a6b35b69bafd01b5b8c2d2acc3265e64bb8593ac4f0e8036acb474babc621ed4
- SSDEEP 98304:Uu5x6M1Poq2Vjnm4u5x6M1wu5x6M1Poq2Vjnmh/h1+:nDGnuPDGn4/h1+
- TLSH T189767C06B6A8C1B5C1F6C67485A68777F73278054B309BDF8355CA1D2E33AD19E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_16c4791073e97de194d404af0f0fcec4_amadey_darkgate_elex_emotet_glassworm_hawkeye_icedid_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_16c4791073e97de194d404af0f0fcec4_amadey_darkgate_elex_emotet_glassworm_hawkeye_icedid_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_16c4791073e97de194d404af0f0fcec4_amadey_darkgate_elex_emotet_glassworm_hawkeye_icedid_remcos_smoke-loader
- Size 7.3MB
- SHA256 a6879132e7fc88184206dd53e04a1b1baf72c53818909be2f0327c40e1ec0fb6
- MD5 16c4791073e97de194d404af0f0fcec4
- SHA1 cbc927836467fd5d69360c95347feca374e4c9cf
- SHA512 d00477c0c118e28afd1cafd0dc3e2af3fe4da66b9a26c4b94d1b950c031bae21a6b35b69bafd01b5b8c2d2acc3265e64bb8593ac4f0e8036acb474babc621ed4
- SSDEEP 98304:Uu5x6M1Poq2Vjnm4u5x6M1wu5x6M1Poq2Vjnmh/h1+:nDGnuPDGn4/h1+
- TLSH T189767C06B6A8C1B5C1F6C67485A68777F73278054B309BDF8355CA1D2E33AD19E3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry