General
- Target 2026-08-21_162f75a39a2a6c2849e5d35c19adbbc0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 38.8MB
- Sample260822-xant1abl3t
- SHA256 1013d9c819f482c22848dc404ebda38d12c94e9706a592452a2557e4add4d1a0
- MD5 162f75a39a2a6c2849e5d35c19adbbc0
- SHA1 0285f1530b3e17b6f3b8c566fa50d97f41f90c2d
- SHA512 ab9c2570146de8b1976b84ca8a83ccce5d5afb3616628e07617d55640c76642fd1585f5cc372d623506de64f1cfe52a58c3b26d794cb8a6d7c5785b1d9198095
- SSDEEP 393216:2cDcQcDcUWqQjpmcDcQcDcUWqQjp2vyEYKbi:tAzAzfjp9AzAzfjpiA
- TLSH T15D977C13F6A840F5E06AD5748A669732EA727C524B319ACF0394F7192F33AD05F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_162f75a39a2a6c2849e5d35c19adbbc0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_162f75a39a2a6c2849e5d35c19adbbc0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_162f75a39a2a6c2849e5d35c19adbbc0_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 38.8MB
- SHA256 1013d9c819f482c22848dc404ebda38d12c94e9706a592452a2557e4add4d1a0
- MD5 162f75a39a2a6c2849e5d35c19adbbc0
- SHA1 0285f1530b3e17b6f3b8c566fa50d97f41f90c2d
- SHA512 ab9c2570146de8b1976b84ca8a83ccce5d5afb3616628e07617d55640c76642fd1585f5cc372d623506de64f1cfe52a58c3b26d794cb8a6d7c5785b1d9198095
- SSDEEP 393216:2cDcQcDcUWqQjpmcDcQcDcUWqQjp2vyEYKbi:tAzAzfjp9AzAzfjpiA
- TLSH T15D977C13F6A840F5E06AD5748A669732EA727C524B319ACF0394F7192F33AD05F39722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry