General
- Target 2026-08-14_0c25221a425d5b3ce4f8b124cde1f7ff_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 4.3MB
- Sample260815-apz49ack5v
- SHA256 2ea4ee490aceeebe839f76241aeb82b6977d333348e1fea8d845ebde97bb6546
- MD5 0c25221a425d5b3ce4f8b124cde1f7ff
- SHA1 f5335d34ebce8ec043d573b7c2bc07d756ead6da
- SHA512 d28569cecc56df5e4438a63436256e0be834a17ff7f1307bf24a49c5b90e642372f6d504aea32c6ffabc4a0d7a0d07a5376799eb09de71010d9ac8b96d2d4e70
- SSDEEP 49152:tYRw5x6M1XPji0Aj+Pji0AjEYRw5x6M1XPji0Aj+Pji0Aj0lju:Su5x6M1fjoAjoXu5x6M1fjoAjol
- TLSH T11A267C51F6A48372D073C475C5D6A77AE93278821B308BC79396CB6C2E276D18A37732
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_0c25221a425d5b3ce4f8b124cde1f7ff_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_0c25221a425d5b3ce4f8b124cde1f7ff_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_0c25221a425d5b3ce4f8b124cde1f7ff_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 4.3MB
- SHA256 2ea4ee490aceeebe839f76241aeb82b6977d333348e1fea8d845ebde97bb6546
- MD5 0c25221a425d5b3ce4f8b124cde1f7ff
- SHA1 f5335d34ebce8ec043d573b7c2bc07d756ead6da
- SHA512 d28569cecc56df5e4438a63436256e0be834a17ff7f1307bf24a49c5b90e642372f6d504aea32c6ffabc4a0d7a0d07a5376799eb09de71010d9ac8b96d2d4e70
- SSDEEP 49152:tYRw5x6M1XPji0Aj+Pji0AjEYRw5x6M1XPji0Aj+Pji0Aj0lju:Su5x6M1fjoAjoXu5x6M1fjoAjol
- TLSH T11A267C51F6A48372D073C475C5D6A77AE93278821B308BC79396CB6C2E276D18A37732
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry