General
- Target 2026-08-16_d9828dccf525c83df0952dc980f955bd_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar_wannacry
- Size 18.8MB
- Sample260816-g4yy3a1fld
- SHA256 d5fd9b60f67324462af04cfc5ad1f2313310c954e167359f4bb76929a21d616e
- MD5 d9828dccf525c83df0952dc980f955bd
- SHA1 ce664abee910fb5403b88a92b7e01c974fe18096
- SHA512 e4fdebe375e275a902fc74e2758646076f91c90f0c4c40fb73dd93c52f867db02248ded5b37970185f3b2a007a7a68a6b3096c0ec73acc9bcfb664f0913c098b
- SSDEEP 196608:Ji8kbi8k+li8kbi8k+Gi8kbi8k+li8kbi8k+P:FkzkMkzkvkzkMkzkI
- TLSH T16C179E8177D0407BE2BE0A3090799636A776FD425711C7CFA6D6FA5A2E323C09932727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_d9828dccf525c83df0952dc980f955bd_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_d9828dccf525c83df0952dc980f955bd_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_d9828dccf525c83df0952dc980f955bd_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar_wannacry
- Size 18.8MB
- SHA256 d5fd9b60f67324462af04cfc5ad1f2313310c954e167359f4bb76929a21d616e
- MD5 d9828dccf525c83df0952dc980f955bd
- SHA1 ce664abee910fb5403b88a92b7e01c974fe18096
- SHA512 e4fdebe375e275a902fc74e2758646076f91c90f0c4c40fb73dd93c52f867db02248ded5b37970185f3b2a007a7a68a6b3096c0ec73acc9bcfb664f0913c098b
- SSDEEP 196608:Ji8kbi8k+li8kbi8k+Gi8kbi8k+li8kbi8k+P:FkzkMkzkvkzkMkzkI
- TLSH T16C179E8177D0407BE2BE0A3090799636A776FD425711C7CFA6D6FA5A2E323C09932727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application