General
- Target 2026-08-21_651884b789669909af8ca1d5f0e9867e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 20.5MB
- Sample260822-q6sdqsfb83
- SHA256 6e9cb88760cf7859eab78da15dbb34e795aca93acdccfbca5010033907aa8e1f
- MD5 651884b789669909af8ca1d5f0e9867e
- SHA1 a0c06fbb41d1972142a811e421759163f692e097
- SHA512 b00049994675a2a9ac0c27b60f16b947c861287acc5cf0b8df93eab93304b468487c1f177fe9fd0052d08c0a5f479d7920515b1158cab41e3aaf4aac3d169348
- SSDEEP 196608:l8Vb618U68Vb618U7/h1+CKmd0m/h1+E8Vb618U68Vb618U7/h1+CKmd0m/h1+Q3:2cDcUqKcDcUqzoO
- TLSH T160278C13F6A441E5D06AC074CA969636EB327C450BB196DF2290F7D92E33AD07F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_651884b789669909af8ca1d5f0e9867e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_651884b789669909af8ca1d5f0e9867e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_651884b789669909af8ca1d5f0e9867e_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 20.5MB
- SHA256 6e9cb88760cf7859eab78da15dbb34e795aca93acdccfbca5010033907aa8e1f
- MD5 651884b789669909af8ca1d5f0e9867e
- SHA1 a0c06fbb41d1972142a811e421759163f692e097
- SHA512 b00049994675a2a9ac0c27b60f16b947c861287acc5cf0b8df93eab93304b468487c1f177fe9fd0052d08c0a5f479d7920515b1158cab41e3aaf4aac3d169348
- SSDEEP 196608:l8Vb618U68Vb618U7/h1+CKmd0m/h1+E8Vb618U68Vb618U7/h1+CKmd0m/h1+Q3:2cDcUqKcDcUqzoO
- TLSH T160278C13F6A441E5D06AC074CA969636EB327C450BB196DF2290F7D92E33AD07F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application