General
- Target 2026-08-09_bede94a38b68e6ab636434029504878c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 15.6MB
- Sample260809-q11sxsaf72
- SHA256 5d18ae408818a2cc5a8a8fa4c935c8d4e68e6e2c640caa406001fac957bde2d6
- MD5 bede94a38b68e6ab636434029504878c
- SHA1 e45d4bf6f693fb6903f7966b72bdd72177e89d61
- SHA512 82da635e675a2091ad97f91598a6683eea4b32cec4e10e7291f20404cc8ca0e75a85433facd9a66de985af506396f33cf6077ba49b8da0b6ed7bbb6ecbffd3ea
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vb618U68Vb618US18UfWoKzj:2cDcy+cDcyqoej
- TLSH T170F69D17F69440F9D06ED5748A558232EA72BC520B31ABDF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_bede94a38b68e6ab636434029504878c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_bede94a38b68e6ab636434029504878c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_bede94a38b68e6ab636434029504878c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 15.6MB
- SHA256 5d18ae408818a2cc5a8a8fa4c935c8d4e68e6e2c640caa406001fac957bde2d6
- MD5 bede94a38b68e6ab636434029504878c
- SHA1 e45d4bf6f693fb6903f7966b72bdd72177e89d61
- SHA512 82da635e675a2091ad97f91598a6683eea4b32cec4e10e7291f20404cc8ca0e75a85433facd9a66de985af506396f33cf6077ba49b8da0b6ed7bbb6ecbffd3ea
- SSDEEP 196608:l8Vb618U68Vb618US18Ufh8Vb618U68Vb618US18UfWoKzj:2cDcy+cDcyqoej
- TLSH T170F69D17F69440F9D06ED5748A558232EA72BC520B31ABDF43A0F6192F33AD06F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry