General
- Target 2026-08-15_231b744872ab162951dce6893158f9ec_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 42.4MB
- Sample260815-ew6ylayeqc
- SHA256 0ccdf6672eb00784f50097aa45cf55981461fc35378e1243a5b2c098569d59ce
- MD5 231b744872ab162951dce6893158f9ec
- SHA1 aa54b965e45bd8855b67d890cd9ad5c2deb56b12
- SHA512 d742d343fe4c9d63fb9559b8e1de1d632b57d92386dcf91ab29b12ed0ac14182580389dc2978e02b6358a70397d49a429491ecac8f35fff964259fcdf3350097
- SSDEEP 393216:2cDc9cDc5K9o7GgGQvyEYKb7cDc9cDc5K9o7GgGQvyEYKbS:tA2AE6qPkaA2AE6qPkc
- TLSH T12FA77D16B6E840F5D1AAD5748B668632F7B27C114B30A7DF4250F61E2F33AD05E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_231b744872ab162951dce6893158f9ec_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_231b744872ab162951dce6893158f9ec_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_231b744872ab162951dce6893158f9ec_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 42.4MB
- SHA256 0ccdf6672eb00784f50097aa45cf55981461fc35378e1243a5b2c098569d59ce
- MD5 231b744872ab162951dce6893158f9ec
- SHA1 aa54b965e45bd8855b67d890cd9ad5c2deb56b12
- SHA512 d742d343fe4c9d63fb9559b8e1de1d632b57d92386dcf91ab29b12ed0ac14182580389dc2978e02b6358a70397d49a429491ecac8f35fff964259fcdf3350097
- SSDEEP 393216:2cDc9cDc5K9o7GgGQvyEYKb7cDc9cDc5K9o7GgGQvyEYKbS:tA2AE6qPkaA2AE6qPkc
- TLSH T12FA77D16B6E840F5D1AAD5748B668632F7B27C114B30A7DF4250F61E2F33AD05E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application