General
- Target 2026-08-17_01bcb3fd5673bd76536562bd7374017b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 15.2MB
- Sample260817-hhfq2awsdt
- SHA256 8257829c67f9181a390bd2951e0251408f7f3eeeb424770dc7f6cb2320629aa9
- MD5 01bcb3fd5673bd76536562bd7374017b
- SHA1 603f4c05ef3ed2b65b2af9e3ef91d8a3b96865cb
- SHA512 f8133bf4ead2b8830e3997d3634215b8de32118db87686a4083b97b8b5b283c3dc5cd26a3a08434a60e4b26a6ec75f14e4aa59a44b11dae2379720d992e3b109
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAATbw/h1+Qw/h1+WWyZ/K0ttYVAAT7b:syZ/K0ttYZTyyZ/K0ttYZT3
- TLSH T10FF68D13F6E441B5E0AAD174CA669732EB327C464BB196CF2240B7D41E37AD0BB39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_01bcb3fd5673bd76536562bd7374017b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_01bcb3fd5673bd76536562bd7374017b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_01bcb3fd5673bd76536562bd7374017b_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 15.2MB
- SHA256 8257829c67f9181a390bd2951e0251408f7f3eeeb424770dc7f6cb2320629aa9
- MD5 01bcb3fd5673bd76536562bd7374017b
- SHA1 603f4c05ef3ed2b65b2af9e3ef91d8a3b96865cb
- SHA512 f8133bf4ead2b8830e3997d3634215b8de32118db87686a4083b97b8b5b283c3dc5cd26a3a08434a60e4b26a6ec75f14e4aa59a44b11dae2379720d992e3b109
- SSDEEP 196608:Jw/h1+Qw/h1+WWyZ/K0ttYVAATbw/h1+Qw/h1+WWyZ/K0ttYVAAT7b:syZ/K0ttYZTyyZ/K0ttYZT3
- TLSH T10FF68D13F6E441B5E0AAD174CA669732EB327C464BB196CF2240B7D41E37AD0BB39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application