General
- Target 2026-08-15_e43dff0e77ae4ca49186cfa986194da2_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 43.4MB
- Sample260815-dne98sdr5w
- SHA256 405190c9ec9b35170d5817ebbe1a7c7cbadda87553ef2814f6d5f47273cb48a2
- MD5 e43dff0e77ae4ca49186cfa986194da2
- SHA1 3958f22c199cae701df9ae692253a2b538f40c85
- SHA512 db937b0c79d43444253bb1aa23a6c4c4179a064e0d73bcd75d1a0268a8e7a7710c1bc2ed065793e104eccd0ce7d91ac7e2196ca4ea23fad6c8d0297aae2254a8
- SSDEEP 393216:2cDc9cDc5K9o7GgGQvyEYKb7cDc9cDc5K9o7GgGQvyEYKbl:tA2AE6qPkaA2AE6qPk/
- TLSH T171A77D16B6E880F5D0AAD5748A668632F7B27C114F30A7DF4250F61E2F33AD05E3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_e43dff0e77ae4ca49186cfa986194da2_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_e43dff0e77ae4ca49186cfa986194da2_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_e43dff0e77ae4ca49186cfa986194da2_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 43.4MB
- SHA256 405190c9ec9b35170d5817ebbe1a7c7cbadda87553ef2814f6d5f47273cb48a2
- MD5 e43dff0e77ae4ca49186cfa986194da2
- SHA1 3958f22c199cae701df9ae692253a2b538f40c85
- SHA512 db937b0c79d43444253bb1aa23a6c4c4179a064e0d73bcd75d1a0268a8e7a7710c1bc2ed065793e104eccd0ce7d91ac7e2196ca4ea23fad6c8d0297aae2254a8
- SSDEEP 393216:2cDc9cDc5K9o7GgGQvyEYKb7cDc9cDc5K9o7GgGQvyEYKbl:tA2AE6qPkaA2AE6qPk/
- TLSH T171A77D16B6E880F5D0AAD5748A668632F7B27C114F30A7DF4250F61E2F33AD05E3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application