General
- Target 2026-08-07_83d8ee697dfe1ceab214ddc22cec0423_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 26.5MB
- Sample260808-bd5e9szths
- SHA256 a4a75f6a45deede0b22f4aa4308b555903fde3fed2bd39fe614f941e14a6a678
- MD5 83d8ee697dfe1ceab214ddc22cec0423
- SHA1 ab28162bd1196040b4387a9a9e93027221a534cb
- SHA512 6800eaa34fdbc6614b60bd2003c6e616f19e8fc628f6ed4559350d35209a0b0b7384fa26ac568866cdc7caee6622d6edfb8b21909f3a2afb05421899cf6db84a
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzL/h1+E8Vb618U68Vbb8Vb61J:2cD2cDIEU8IBJucD2cDIEU8IBJ2
- TLSH T1EC579E16F6A440F5D17AC534C5A69236EB72BC120B318BCB53A4F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_83d8ee697dfe1ceab214ddc22cec0423_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_83d8ee697dfe1ceab214ddc22cec0423_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_83d8ee697dfe1ceab214ddc22cec0423_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 26.5MB
- SHA256 a4a75f6a45deede0b22f4aa4308b555903fde3fed2bd39fe614f941e14a6a678
- MD5 83d8ee697dfe1ceab214ddc22cec0423
- SHA1 ab28162bd1196040b4387a9a9e93027221a534cb
- SHA512 6800eaa34fdbc6614b60bd2003c6e616f19e8fc628f6ed4559350d35209a0b0b7384fa26ac568866cdc7caee6622d6edfb8b21909f3a2afb05421899cf6db84a
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzL/h1+E8Vb618U68Vbb8Vb61J:2cD2cDIEU8IBJucD2cDIEU8IBJ2
- TLSH T1EC579E16F6A440F5D17AC534C5A69236EB72BC120B318BCB53A4F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry