General
- Target 2026-08-23_ecd69dc076c96e31f1a17df42d787562_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 53.6MB
- Sample260823-t16wqaybph
- SHA256 e14b7343b93366a9eacc1de41a13fc311db254d9f265880e7f6ff23103ad196c
- MD5 ecd69dc076c96e31f1a17df42d787562
- SHA1 a57e4b1f0787d03652534d92ca1dcd37d7bce9c0
- SHA512 69182300c03fa383754dd4948615be562bed486734e18f1a957a651db479afbe041706bf987d41e862f594287d03cf957fb56fa8384b30a0be0933f7d78ba814
- SSDEEP 393216:2cD2cDIEU8IBJSacAlucD2cDIEU8IBJSacAlo6cD2cDIEU8IBJSacAlucO:tZMzOAllZMzOAl0ZMzOAllO
- TLSH T16AC79E16F6A440F5D17AD5348AA69232EB72BC120B3197CF43A4F6591F336D09F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_ecd69dc076c96e31f1a17df42d787562_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_ecd69dc076c96e31f1a17df42d787562_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_ecd69dc076c96e31f1a17df42d787562_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar
- Size 53.6MB
- SHA256 e14b7343b93366a9eacc1de41a13fc311db254d9f265880e7f6ff23103ad196c
- MD5 ecd69dc076c96e31f1a17df42d787562
- SHA1 a57e4b1f0787d03652534d92ca1dcd37d7bce9c0
- SHA512 69182300c03fa383754dd4948615be562bed486734e18f1a957a651db479afbe041706bf987d41e862f594287d03cf957fb56fa8384b30a0be0933f7d78ba814
- SSDEEP 393216:2cD2cDIEU8IBJSacAlucD2cDIEU8IBJSacAlo6cD2cDIEU8IBJSacAlucO:tZMzOAllZMzOAl0ZMzOAllO
- TLSH T16AC79E16F6A440F5D17AD5348AA69232EB72BC120B3197CF43A4F6591F336D09F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry