General
- Target 2026-08-18_f2767f5e9149189537d1337605e1e977_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_remcos_smoke-loader_vidar
- Size 15.4MB
- Sample260818-tylsrsxtav
- SHA256 050cfadbfd2d6573afeffc4757571e65dfc69952c7a9716f57cd23602181fdce
- MD5 f2767f5e9149189537d1337605e1e977
- SHA1 c17405a3f67d2b5b85d44ee622ed6d8dcb19016e
- SHA512 daf888f935e0242f03273917670c0b8f8288a7abf7559686143b99d125e9d81793236d36b9c115257c6798be4e077c4d0abcbead4d42f963d64f8b5d1c9545e7
- SSDEEP 196608:Qi8kLV/h1+5i8kLV/h1+mi8kLV/h1+5i8kLV/h1+c:IkLikLlkLikLF
- TLSH T12EF69E42B6E4417AE07B8534D5B69676EA727C420B21DACF5285F61E2E337C0DA36333
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-18_f2767f5e9149189537d1337605e1e977_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_f2767f5e9149189537d1337605e1e977_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_f2767f5e9149189537d1337605e1e977_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_icedid_remcos_smoke-loader_vidar
- Size 15.4MB
- SHA256 050cfadbfd2d6573afeffc4757571e65dfc69952c7a9716f57cd23602181fdce
- MD5 f2767f5e9149189537d1337605e1e977
- SHA1 c17405a3f67d2b5b85d44ee622ed6d8dcb19016e
- SHA512 daf888f935e0242f03273917670c0b8f8288a7abf7559686143b99d125e9d81793236d36b9c115257c6798be4e077c4d0abcbead4d42f963d64f8b5d1c9545e7
- SSDEEP 196608:Qi8kLV/h1+5i8kLV/h1+mi8kLV/h1+5i8kLV/h1+c:IkLikLlkLikLF
- TLSH T12EF69E42B6E4417AE07B8534D5B69676EA727C420B21DACF5285F61E2E337C0DA36333
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry