General
- Target 2026-08-10_fa134877f7338030af9f10df4c58cbfe_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 31.6MB
- Sample260810-ng89vaxdrb
- SHA256 7df1efd8e928954dc1026805da8936e10e694ebd0be279eb9023ed8f7f1d25f2
- MD5 fa134877f7338030af9f10df4c58cbfe
- SHA1 5a3f3eb42497c902a3d6d7d4a1c1599946c83941
- SHA512 bfd54a1bbe3a864f50a46f941e283f402ae580fcb6e9d522e8207f3ae21206ef47c76f912b9a64f59804eee57709507480e6d92918328b8e7ae2a66c116a6284
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+b9w/h1+Qw/h1+cw/h1+Qw/h1+beoK0w/h1+Qw/hY:CeeoKeeoe
- TLSH T1F3775A52F5A081B1D07A8471C696A77AFA337C411B708AC75386FB3C2F376D19A36722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_fa134877f7338030af9f10df4c58cbfe_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_fa134877f7338030af9f10df4c58cbfe_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_fa134877f7338030af9f10df4c58cbfe_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 31.6MB
- SHA256 7df1efd8e928954dc1026805da8936e10e694ebd0be279eb9023ed8f7f1d25f2
- MD5 fa134877f7338030af9f10df4c58cbfe
- SHA1 5a3f3eb42497c902a3d6d7d4a1c1599946c83941
- SHA512 bfd54a1bbe3a864f50a46f941e283f402ae580fcb6e9d522e8207f3ae21206ef47c76f912b9a64f59804eee57709507480e6d92918328b8e7ae2a66c116a6284
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+b9w/h1+Qw/h1+cw/h1+Qw/h1+beoK0w/h1+Qw/hY:CeeoKeeoe
- TLSH T1F3775A52F5A081B1D07A8471C696A77AFA337C411B708AC75386FB3C2F376D19A36722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry