General
- Target 2026-08-23_acc1787681fcd31e87a678cb4e0960b4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 13.4MB
- Sample260824-b4rxvssbje
- SHA256 e082cd418b5f86895dfd0d31e908d5fd85b3a2f5a172a2314f2a182a04b80b92
- MD5 acc1787681fcd31e87a678cb4e0960b4
- SHA1 d6289c1a0f73d346c04208d5f7f00bae468f256f
- SHA512 4d486a05a8fb732dd806992c2dc2c248373330e0d3e6864a2031836b4bd4a2d8d9ba752daa568b27a4c4f367bd0ffdc5a002538ae98ce370dd0ff43a06e98522
- SSDEEP 196608:l8Vb618U68Vb618U7/h1+TO8Vb618U68Vb618U7/h1+T1j:2cDcQcDc0j
- TLSH T1B4E68C17F6A480F5D07AD47486A69736EA727C120B319BCB4394F61D2E336D09F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_acc1787681fcd31e87a678cb4e0960b4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_acc1787681fcd31e87a678cb4e0960b4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_acc1787681fcd31e87a678cb4e0960b4_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 13.4MB
- SHA256 e082cd418b5f86895dfd0d31e908d5fd85b3a2f5a172a2314f2a182a04b80b92
- MD5 acc1787681fcd31e87a678cb4e0960b4
- SHA1 d6289c1a0f73d346c04208d5f7f00bae468f256f
- SHA512 4d486a05a8fb732dd806992c2dc2c248373330e0d3e6864a2031836b4bd4a2d8d9ba752daa568b27a4c4f367bd0ffdc5a002538ae98ce370dd0ff43a06e98522
- SSDEEP 196608:l8Vb618U68Vb618U7/h1+TO8Vb618U68Vb618U7/h1+T1j:2cDcQcDc0j
- TLSH T1B4E68C17F6A480F5D07AD47486A69736EA727C120B319BCB4394F61D2E336D09F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry