General
- Target 2026-08-14_ed6d98ef3113930f8909dd9d1557e7f0_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 40.8MB
- Sample260814-pcjdasaq2w
- SHA256 c5b63e711ad268a77738421a1ef80b575f0c56e79c42aef5222a6b151759a8a4
- MD5 ed6d98ef3113930f8909dd9d1557e7f0
- SHA1 1a9e363e3c1a173992d4382efc17d2364a14ba9d
- SHA512 1d3ef4b16284b4f2985fd39c542eff4d7b4db21013481e9bfb3c073d57e806e68615a05fc9d9a768fbc13a3ef7a74ae217a9a16951bd71b80ec48b1d994893bf
- SSDEEP 786432:IkL3R5kL3RqkL3R5kL3R5obkL3R5kL3Rqke:JRqRrRqR55RqR+
- TLSH T1E0979F03B6E440ADD16B8634C6259632EA72BC461720DBDF6698F65E1F33BD05F36322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_ed6d98ef3113930f8909dd9d1557e7f0_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_ed6d98ef3113930f8909dd9d1557e7f0_akira_amadey_cobalt-strike_darkgate_elex_emotet_glasswor.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_ed6d98ef3113930f8909dd9d1557e7f0_akira_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 40.8MB
- SHA256 c5b63e711ad268a77738421a1ef80b575f0c56e79c42aef5222a6b151759a8a4
- MD5 ed6d98ef3113930f8909dd9d1557e7f0
- SHA1 1a9e363e3c1a173992d4382efc17d2364a14ba9d
- SHA512 1d3ef4b16284b4f2985fd39c542eff4d7b4db21013481e9bfb3c073d57e806e68615a05fc9d9a768fbc13a3ef7a74ae217a9a16951bd71b80ec48b1d994893bf
- SSDEEP 786432:IkL3R5kL3RqkL3R5kL3R5obkL3R5kL3Rqke:JRqRrRqR55RqR+
- TLSH T1E0979F03B6E440ADD16B8634C6259632EA72BC461720DBDF6698F65E1F33BD05F36322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry