General
- Target 2026-08-13_518e8b45ae2ccb2faeee0e44ca2485d9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 10.8MB
- Sample260813-qe56hsbb68
- SHA256 40005ff0e0c02eca81839831598e026bfaa43102d2f0cafb2511a6a72bb791d6
- MD5 518e8b45ae2ccb2faeee0e44ca2485d9
- SHA1 db974696610cfd163d09d881ec98eba6357b01ae
- SHA512 408cf8911d015cd22de7c22ba84c7372cb38cd4359899f1f279dee02c75ac00c4d6af660fbda46bf13b164ee50249a32cffac26a400144c3d81cccb96a367063
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1je5x6c1/e5x6c1ze5x6c1TWQtZ/K0tGOFWVRuLftCT:IkQgkQXWyZ/K0ttYVAAT
- TLSH T194B6AF03F6D540F5D26A95308A7AA732DB32BC054BB196DB6350FAD41E326C0BF39366
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_518e8b45ae2ccb2faeee0e44ca2485d9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_518e8b45ae2ccb2faeee0e44ca2485d9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_518e8b45ae2ccb2faeee0e44ca2485d9_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 10.8MB
- SHA256 40005ff0e0c02eca81839831598e026bfaa43102d2f0cafb2511a6a72bb791d6
- MD5 518e8b45ae2ccb2faeee0e44ca2485d9
- SHA1 db974696610cfd163d09d881ec98eba6357b01ae
- SHA512 408cf8911d015cd22de7c22ba84c7372cb38cd4359899f1f279dee02c75ac00c4d6af660fbda46bf13b164ee50249a32cffac26a400144c3d81cccb96a367063
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1je5x6c1/e5x6c1ze5x6c1TWQtZ/K0tGOFWVRuLftCT:IkQgkQXWyZ/K0ttYVAAT
- TLSH T194B6AF03F6D540F5D26A95308A7AA732DB32BC054BB196DB6350FAD41E326C0BF39366
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry