General
- Target 2026-08-16_2fe26468c645542fb0a09788bb9c0701_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 11.1MB
- Sample260816-ng1byach85
- SHA256 5c17b41df4d6654a9f2017edcec8c2bb7d26b99bed29dad4365ad63d1624961a
- MD5 2fe26468c645542fb0a09788bb9c0701
- SHA1 93ed9b70fc3801fc94c6f02da4fbd83ca85acd01
- SHA512 f976506cc3ba648c65c128cbae5703a62b6cc1bef40483d147d57560a36db1f255decaeab3edcd334398cfef806908d2cc35e4e07dd2a56914fadee9b8e04bde
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDkl1u5x6M1WoDDkl2u5x6M1WoDDklRhx0z:Ji8kbi8koi8kbi8kJKz
- TLSH T132C6AE5176E0407AE1AE4930976A973197F6FC524B50C7CFD2D5FA1A2E323C0AA32727
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_2fe26468c645542fb0a09788bb9c0701_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_2fe26468c645542fb0a09788bb9c0701_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_2fe26468c645542fb0a09788bb9c0701_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar_wannacry
- Size 11.1MB
- SHA256 5c17b41df4d6654a9f2017edcec8c2bb7d26b99bed29dad4365ad63d1624961a
- MD5 2fe26468c645542fb0a09788bb9c0701
- SHA1 93ed9b70fc3801fc94c6f02da4fbd83ca85acd01
- SHA512 f976506cc3ba648c65c128cbae5703a62b6cc1bef40483d147d57560a36db1f255decaeab3edcd334398cfef806908d2cc35e4e07dd2a56914fadee9b8e04bde
- SSDEEP 98304:Su5x6M1WoDDkl2u5x6M1WoDDkl1u5x6M1WoDDkl2u5x6M1WoDDklRhx0z:Ji8kbi8koi8kbi8kJKz
- TLSH T132C6AE5176E0407AE1AE4930976A973197F6FC524B50C7CFD2D5FA1A2E323C0AA32727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry