General
- Target 2026-08-20_0e163c8c6b62960cef2195ad71928bed_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 54.5MB
- Sample260820-drta9sdr61
- SHA256 a171cca359639c007a990103228eb43ff19bdc626c26f9df9b6703a80117aeeb
- MD5 0e163c8c6b62960cef2195ad71928bed
- SHA1 388302353edb25caed0e95c5ae14369071e6c97f
- SHA512 db6f6b7995ebec4b7279b111e2d4ee1321e7d1e51c6f85f7170b0e04e94bae6f7e33feaae0aaf7bd03135613a04247fa22b7073ccb104491350d0b0f34c08330
- SSDEEP 393216:2cDc3KRgvyEYKb7cDc3KRgvyEYKbVobcDc3KRgvyEYKb7cDc3KRgvyEYKbVoT:tAaRUaAaRUg4AaRUaAaRUgT
- TLSH T157C76B22B6E540E5D06A9034CF668631E7B27C624FB097DB4250F69E2F336D07E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_0e163c8c6b62960cef2195ad71928bed_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_0e163c8c6b62960cef2195ad71928bed_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_0e163c8c6b62960cef2195ad71928bed_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 54.5MB
- SHA256 a171cca359639c007a990103228eb43ff19bdc626c26f9df9b6703a80117aeeb
- MD5 0e163c8c6b62960cef2195ad71928bed
- SHA1 388302353edb25caed0e95c5ae14369071e6c97f
- SHA512 db6f6b7995ebec4b7279b111e2d4ee1321e7d1e51c6f85f7170b0e04e94bae6f7e33feaae0aaf7bd03135613a04247fa22b7073ccb104491350d0b0f34c08330
- SSDEEP 393216:2cDc3KRgvyEYKb7cDc3KRgvyEYKbVobcDc3KRgvyEYKb7cDc3KRgvyEYKbVoT:tAaRUaAaRUg4AaRUaAaRUgT
- TLSH T157C76B22B6E540E5D06A9034CF668631E7B27C624FB097DB4250F69E2F336D07E39726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry