General
- Target 2026-08-16_a6fdc24bf4c0442de641b94a8131ddcb_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 34.1MB
- Sample260816-mac3dscf58
- SHA256 1a32fe5ec0f0e73efa3b2417da17f8d91ea44faf45235a0b4108fc2a7315298b
- MD5 a6fdc24bf4c0442de641b94a8131ddcb
- SHA1 4e3d4d0493a99ea4f49c65140c04467d13030a34
- SHA512 eba110be3f6eb8700443af6682732a046ae884f5c9ab933a0884b03da28522206e71da3eec45d1c839e26a1ddad3cc4596364364c9b747113ff5bbd1599d1ab1
- SSDEEP 196608:Ji8yi8B/h1+Qi8yi8B/h1+39i8yi8B/h1+Qi8fi8yi8B/h1+Qi8yi8B/h1+39i8f:F2/2MJ2/X2/2MJ2/w
- TLSH T134778E81B2D04176E17E453080A5963AE776BD425721CBCFA6C6FB6A3E327C09936733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_a6fdc24bf4c0442de641b94a8131ddcb_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_a6fdc24bf4c0442de641b94a8131ddcb_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_a6fdc24bf4c0442de641b94a8131ddcb_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_remcos_smoke-loader_vidar
- Size 34.1MB
- SHA256 1a32fe5ec0f0e73efa3b2417da17f8d91ea44faf45235a0b4108fc2a7315298b
- MD5 a6fdc24bf4c0442de641b94a8131ddcb
- SHA1 4e3d4d0493a99ea4f49c65140c04467d13030a34
- SHA512 eba110be3f6eb8700443af6682732a046ae884f5c9ab933a0884b03da28522206e71da3eec45d1c839e26a1ddad3cc4596364364c9b747113ff5bbd1599d1ab1
- SSDEEP 196608:Ji8yi8B/h1+Qi8yi8B/h1+39i8yi8B/h1+Qi8fi8yi8B/h1+Qi8yi8B/h1+39i8f:F2/2MJ2/X2/2MJ2/w
- TLSH T134778E81B2D04176E17E453080A5963AE776BD425721CBCFA6C6FB6A3E327C09936733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application