General
- Target 2026-08-11_e992c6e29924e41a7861c0039b80eff6_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 25.0MB
- Sample260811-hfsb2stxex
- SHA256 818ea57267189c7720759535e20c96237679776be8924ba0fd286d035495e07a
- MD5 e992c6e29924e41a7861c0039b80eff6
- SHA1 64753ed8b7b13a5e5444d9d8d7abc306300180a4
- SHA512 db429f22bdecda28664d4d4d3fb182913bdd0b7d3216438179b9d049084be429a2340a1c29a1375688de989c31dbe1075f5845604666cd233e6cea365a764af1
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCZ8Vb618U68Vb618Ul8Vb618U68Vb61r:2cDcKcDcOKcDcKcDcOc
- TLSH T15D477C17F69444F5D16E983086A59232EA73BC120B7197CB43A4F62D2F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_e992c6e29924e41a7861c0039b80eff6_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_e992c6e29924e41a7861c0039b80eff6_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_e992c6e29924e41a7861c0039b80eff6_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 25.0MB
- SHA256 818ea57267189c7720759535e20c96237679776be8924ba0fd286d035495e07a
- MD5 e992c6e29924e41a7861c0039b80eff6
- SHA1 64753ed8b7b13a5e5444d9d8d7abc306300180a4
- SHA512 db429f22bdecda28664d4d4d3fb182913bdd0b7d3216438179b9d049084be429a2340a1c29a1375688de989c31dbe1075f5845604666cd233e6cea365a764af1
- SSDEEP 196608:l8Vb618U68Vb618Ul8Vb618U68Vb618UCZ8Vb618U68Vb618Ul8Vb618U68Vb61r:2cDcKcDcOKcDcKcDcOc
- TLSH T15D477C17F69444F5D16E983086A59232EA73BC120B7197CB43A4F62D2F336D06F3A726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry