General
- Target 2026-08-21_a0cc21ee7a496e0112bb96abbd2bcbde_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 34.9MB
- Sample260822-k4sc3axtbv
- SHA256 0152f3ecb046087ae1a7a6f4b82b06fcd694c8a5ce041adb7363ad2d04fb8f7c
- MD5 a0cc21ee7a496e0112bb96abbd2bcbde
- SHA1 bb11992d1a7e759c18a3c71489ec228cdc6a74ff
- SHA512 0d04fe4547daf469d7233a0c15a357f4c5526b0f7ab197459fd2965d7359ef4333ef1216e56855d9093c06806ecfffc8dee29faeaff36c45e18050ea02ee1cdb
- SSDEEP 196608:l8Vb618U68Vb618U7/h1+TO8Vb618U68Vb618U7/h1+T/WqQI0pyK8Vb618U68Vq:2cDcQcDcUWqQjpmcDcQcDcUWqQjp6
- TLSH T178878D13F6A840E5E07AD57486A69732EA727C524B3196CF0394F7192F33AD05F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_a0cc21ee7a496e0112bb96abbd2bcbde_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_a0cc21ee7a496e0112bb96abbd2bcbde_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_a0cc21ee7a496e0112bb96abbd2bcbde_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 34.9MB
- SHA256 0152f3ecb046087ae1a7a6f4b82b06fcd694c8a5ce041adb7363ad2d04fb8f7c
- MD5 a0cc21ee7a496e0112bb96abbd2bcbde
- SHA1 bb11992d1a7e759c18a3c71489ec228cdc6a74ff
- SHA512 0d04fe4547daf469d7233a0c15a357f4c5526b0f7ab197459fd2965d7359ef4333ef1216e56855d9093c06806ecfffc8dee29faeaff36c45e18050ea02ee1cdb
- SSDEEP 196608:l8Vb618U68Vb618U7/h1+TO8Vb618U68Vb618U7/h1+T/WqQI0pyK8Vb618U68Vq:2cDcQcDcUWqQjpmcDcQcDcUWqQjp6
- TLSH T178878D13F6A840E5E07AD57486A69732EA727C524B3196CF0394F7192F33AD05F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry