General
- Target 2026-08-14_15cfc90f0649ac22ce473618c4716d2c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 37.5MB
- Sample260814-rljfrsdk61
- SHA256 7685432ff7b751832185d049733f4628a795defbbf8792b7b94844327cbebe00
- MD5 15cfc90f0649ac22ce473618c4716d2c
- SHA1 fdd9cf02885969651b2d834a1a13a3cf1580a4cf
- SHA512 497e734bccc98aba72203c013efb47f3a9d2049de6f94a8cd294ad2cbfdfabe6770ac2e9c06bc6c66982bbf103edf967b0db3e604c916bb7553f00ddc46189e0
- SSDEEP 393216:2c7cSc7c6c7cSc7cbc7cSc7c6c7cSc7cF:tYRYZYRY4YRYZYRYF
- TLSH T185877B16E69440F5D16E9530C7AA9232FA73B8120BB097CB53E4C62D1F336D06E7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_15cfc90f0649ac22ce473618c4716d2c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_15cfc90f0649ac22ce473618c4716d2c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_15cfc90f0649ac22ce473618c4716d2c_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 37.5MB
- SHA256 7685432ff7b751832185d049733f4628a795defbbf8792b7b94844327cbebe00
- MD5 15cfc90f0649ac22ce473618c4716d2c
- SHA1 fdd9cf02885969651b2d834a1a13a3cf1580a4cf
- SHA512 497e734bccc98aba72203c013efb47f3a9d2049de6f94a8cd294ad2cbfdfabe6770ac2e9c06bc6c66982bbf103edf967b0db3e604c916bb7553f00ddc46189e0
- SSDEEP 393216:2c7cSc7c6c7cSc7cbc7cSc7c6c7cSc7cF:tYRYZYRY4YRYZYRYF
- TLSH T185877B16E69440F5D16E9530C7AA9232FA73B8120BB097CB53E4C62D1F336D06E7A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application