General
- Target 2026-08-08_0bed9522fc7fee34b9319aba1da52cd0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 10.7MB
- Sample260808-n7tl3szzb1
- SHA256 f2dd0bd0094ec52fc5974e2351029cfee42b18d62eb0916618381ead03492fd5
- MD5 0bed9522fc7fee34b9319aba1da52cd0
- SHA1 6a8630c76f5f9b29b3d51f80f33a4a4ba6652a1e
- SHA512 79aedb20600028689590a8870aebc903be2d6dc92d07bb96f0cd2457c8b450d52f0b221161273625f2e93dde2e403f35567c5bf5f4759df51035e210a9beee3d
- SSDEEP 98304:nu5x6M1WoDD+QvGAdlCEL8c/bRNw5CPWQtZ/K0tGOFWVRuLftCT1:Qi8PvyEYc/b3w8PWyZ/K0ttYVAAT1
- TLSH T11AB67D13B6E440F5E06AD134CA368632E7727C164BB1A6DF1250F69E2F336D06E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-08_0bed9522fc7fee34b9319aba1da52cd0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_0bed9522fc7fee34b9319aba1da52cd0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_0bed9522fc7fee34b9319aba1da52cd0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 10.7MB
- SHA256 f2dd0bd0094ec52fc5974e2351029cfee42b18d62eb0916618381ead03492fd5
- MD5 0bed9522fc7fee34b9319aba1da52cd0
- SHA1 6a8630c76f5f9b29b3d51f80f33a4a4ba6652a1e
- SHA512 79aedb20600028689590a8870aebc903be2d6dc92d07bb96f0cd2457c8b450d52f0b221161273625f2e93dde2e403f35567c5bf5f4759df51035e210a9beee3d
- SSDEEP 98304:nu5x6M1WoDD+QvGAdlCEL8c/bRNw5CPWQtZ/K0tGOFWVRuLftCT1:Qi8PvyEYc/b3w8PWyZ/K0ttYVAAT1
- TLSH T11AB67D13B6E440F5E06AD134CA368632E7727C164BB1A6DF1250F69E2F336D06E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry