General
- Target 2026-08-12_afe517a2e0785bbc9fa3003473efe415_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_vidar
- Size 9.3MB
- Sample260812-keeqnssdrb
- SHA256 d3cfea90e80e524c664be49d9ba6a626f1abbe1740083cb24a7983a7f0ac67d0
- MD5 afe517a2e0785bbc9fa3003473efe415
- SHA1 c67ff784317bcef7344375f82390e492c62c9f84
- SHA512 cab4164af4bf7af272c7b5403fea8ff8b4ec1b6dd10eaaf99dee140e9a3eb167ee176a4ef889b1119d79c80b0b16c718cbdb9b5f326e4334b0069087d89bac22
- SSDEEP 196608:JSWyZ/K0ttYVAAmSWyZ/K0ttYVAAG/h1+:zyZ/K0ttYZMyZ/K0ttYZ
- TLSH T168A66B13F59540E9D06AC079CF4A9332EB32784907F1A6EF365097E52E27AE07B39724
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_afe517a2e0785bbc9fa3003473efe415_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_afe517a2e0785bbc9fa3003473efe415_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_afe517a2e0785bbc9fa3003473efe415_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_vidar
- Size 9.3MB
- SHA256 d3cfea90e80e524c664be49d9ba6a626f1abbe1740083cb24a7983a7f0ac67d0
- MD5 afe517a2e0785bbc9fa3003473efe415
- SHA1 c67ff784317bcef7344375f82390e492c62c9f84
- SHA512 cab4164af4bf7af272c7b5403fea8ff8b4ec1b6dd10eaaf99dee140e9a3eb167ee176a4ef889b1119d79c80b0b16c718cbdb9b5f326e4334b0069087d89bac22
- SSDEEP 196608:JSWyZ/K0ttYVAAmSWyZ/K0ttYVAAG/h1+:zyZ/K0ttYZMyZ/K0ttYZ
- TLSH T168A66B13F59540E9D06AC079CF4A9332EB32784907F1A6EF365097E52E27AE07B39724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry