General
- Target 2026-08-17_aaea7aa934a367131fd87faa123ce955_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 41.3MB
- Sample260817-cdd4ra1emf
- SHA256 e0d0e350bf37724113368d28fad7d7e565ae590bbaa6a32d00f53af47fd2bcc4
- MD5 aaea7aa934a367131fd87faa123ce955
- SHA1 0265c90565b97a1472d4d940e71bc25304395ff4
- SHA512 2aa8da854e1398c1c8b4240d01720c88cb94966b0ceb809531419aed12f25a547403db466bdf586d89211a2f821a28a617e1201c505682dbfbb7f32448483b40
- SSDEEP 393216:2cDc3KRjcDc3KRpeccDc3KRjcDc3KRpeul:tAaRgAaRsXAaRgAaRsul
- TLSH T11C976A22B2E140E9D06E9431CF568231D6E27C654FF097DB9250B2992F73AD07F3A71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_aaea7aa934a367131fd87faa123ce955_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_aaea7aa934a367131fd87faa123ce955_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_aaea7aa934a367131fd87faa123ce955_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 41.3MB
- SHA256 e0d0e350bf37724113368d28fad7d7e565ae590bbaa6a32d00f53af47fd2bcc4
- MD5 aaea7aa934a367131fd87faa123ce955
- SHA1 0265c90565b97a1472d4d940e71bc25304395ff4
- SHA512 2aa8da854e1398c1c8b4240d01720c88cb94966b0ceb809531419aed12f25a547403db466bdf586d89211a2f821a28a617e1201c505682dbfbb7f32448483b40
- SSDEEP 393216:2cDc3KRjcDc3KRpeccDc3KRjcDc3KRpeul:tAaRgAaRsXAaRgAaRsul
- TLSH T11C976A22B2E140E9D06E9431CF568231D6E27C654FF097DB9250B2992F73AD07F3A71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application