General
- Target 2026-08-21_6ee8abfc830fddcb53e045205a882cc0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 36.9MB
- Sample260822-qawfhsvbqh
- SHA256 d3d43893ab2456f1ae31180330f8906a1f68e494553555581f9fc14f10f200d6
- MD5 6ee8abfc830fddcb53e045205a882cc0
- SHA1 350be4358876f32e4b5046b299218db1ee461c9e
- SHA512 2559e0507bc98d9c69f61af82ad0145d24eb98a4a32e232a02e4bcf25d5520a50d33288c83105ab0e5c4d73769d4248b2a385fac696f563fcc2c0ed82b838a30
- SSDEEP 196608:l8Vb618U68Vb618U7/h1+CKmd0t8Vb618U68Vb618U7/h1+CKmd0W8Vb618U68Vz:2cDcUq9cDcUqQcDcUq9cDcUqA
- TLSH T1E5878C13F6A444E5D16AC434CA568236EB327C550BF196DB2290F6E92F336D07F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_6ee8abfc830fddcb53e045205a882cc0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_6ee8abfc830fddcb53e045205a882cc0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_6ee8abfc830fddcb53e045205a882cc0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 36.9MB
- SHA256 d3d43893ab2456f1ae31180330f8906a1f68e494553555581f9fc14f10f200d6
- MD5 6ee8abfc830fddcb53e045205a882cc0
- SHA1 350be4358876f32e4b5046b299218db1ee461c9e
- SHA512 2559e0507bc98d9c69f61af82ad0145d24eb98a4a32e232a02e4bcf25d5520a50d33288c83105ab0e5c4d73769d4248b2a385fac696f563fcc2c0ed82b838a30
- SSDEEP 196608:l8Vb618U68Vb618U7/h1+CKmd0t8Vb618U68Vb618U7/h1+CKmd0W8Vb618U68Vz:2cDcUq9cDcUqQcDcUq9cDcUqA
- TLSH T1E5878C13F6A444E5D16AC434CA568236EB327C550BF196DB2290F6E92F336D07F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application