General
- Target 2026-08-10_70b66e59964d3d38df688da37f7f851b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 19.9MB
- Sample260810-19tfbavwat
- SHA256 4ebf102b3d819a940c93fcaefe696875c4ec9aac4f98578d962a0cf3b1effbfc
- MD5 70b66e59964d3d38df688da37f7f851b
- SHA1 8e786df2cebc72bcdb0c19074ff583f529b6ad9c
- SHA512 e312c9600ef41e9ca48b5b0d8d5e679f323546e09ec17690ac1eb35b569024158d9dcdc6519cb740c3226e07b8d37ff91b35b32e437fba38e1513921e8a3a6c6
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09oi8SWyZ/K0ttYVAAT1Kmd09oiX:zyZ/K0ttYZTEqT7yZ/K0ttYZTEqTw
- TLSH T1BF277D13F2E841A9E0A6D174CE669631EB327C494BF195DF3240B6D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_70b66e59964d3d38df688da37f7f851b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_70b66e59964d3d38df688da37f7f851b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_70b66e59964d3d38df688da37f7f851b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 19.9MB
- SHA256 4ebf102b3d819a940c93fcaefe696875c4ec9aac4f98578d962a0cf3b1effbfc
- MD5 70b66e59964d3d38df688da37f7f851b
- SHA1 8e786df2cebc72bcdb0c19074ff583f529b6ad9c
- SHA512 e312c9600ef41e9ca48b5b0d8d5e679f323546e09ec17690ac1eb35b569024158d9dcdc6519cb740c3226e07b8d37ff91b35b32e437fba38e1513921e8a3a6c6
- SSDEEP 196608:JSWyZ/K0ttYVAAT1Kmd09oi8SWyZ/K0ttYVAAT1Kmd09oiX:zyZ/K0ttYZTEqT7yZ/K0ttYZTEqTw
- TLSH T1BF277D13F2E841A9E0A6D174CE669631EB327C494BF195DF3240B6D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry