General
- Target 2026-08-10_c87e6555f6658d39bcde4a291f401bf1_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 11.2MB
- Sample260810-r94fva1drh
- SHA256 355d8c6644153e089d990de524d0c3545d0f08312bf1ee366f3da71dfd20a7a3
- MD5 c87e6555f6658d39bcde4a291f401bf1
- SHA1 fc5467cdd3cd1673b4225067f0b97fffdff162dd
- SHA512 fadfed8e3b1f9061c2dd86f5628cdadb37b2c95856bed398614dc4c28dd66096bf94e06d32f20bb454776c5442aefaf100507e2e8ef3c536315552070256d93e
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+byvyEYc/b3w8O:CyvyEYKbi
- TLSH T11DC66C51F6A481B1D07AD074C6A69776FA7378421B318BCB4285CB2D2F336D09E3A736
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_c87e6555f6658d39bcde4a291f401bf1_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_c87e6555f6658d39bcde4a291f401bf1_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_c87e6555f6658d39bcde4a291f401bf1_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_stealc_vidar
- Size 11.2MB
- SHA256 355d8c6644153e089d990de524d0c3545d0f08312bf1ee366f3da71dfd20a7a3
- MD5 c87e6555f6658d39bcde4a291f401bf1
- SHA1 fc5467cdd3cd1673b4225067f0b97fffdff162dd
- SHA512 fadfed8e3b1f9061c2dd86f5628cdadb37b2c95856bed398614dc4c28dd66096bf94e06d32f20bb454776c5442aefaf100507e2e8ef3c536315552070256d93e
- SSDEEP 196608:Jw/h1+Qw/h1+cw/h1+Qw/h1+byvyEYc/b3w8O:CyvyEYKbi
- TLSH T11DC66C51F6A481B1D07AD074C6A69776FA7378421B318BCB4285CB2D2F336D09E3A736
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry