General
- Target 2026-08-23_4cb9a4866fb246bfb869dc4d1727b403_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 13.4MB
- Sample260824-pgqyyadc87
- SHA256 8406ac80bff255f78ff2ba515dfb62ec51849efe677bee2ddfb5eff2ca6e4d36
- MD5 4cb9a4866fb246bfb869dc4d1727b403
- SHA1 7a51b4144aeabf6b477789d9f518e82561739889
- SHA512 c563cc4c29f6a7e11706d12d7b05cb3195b5f30742adde7f1a63df721e2cff111bff6ae5b0209db34d39f84026865d9930bbfff6d6e0be349b353ea84d7e84a7
- SSDEEP 196608:l8Vb618U68Vb618U7/h1+TO8Vb618U68Vb618U7/h1+T/:2cDcQcDcw
- TLSH T19FE68D17F6A480F5D07AD47486A69736EA727C120B319BCB4394F61D2E336D09F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_4cb9a4866fb246bfb869dc4d1727b403_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_4cb9a4866fb246bfb869dc4d1727b403_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_4cb9a4866fb246bfb869dc4d1727b403_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 13.4MB
- SHA256 8406ac80bff255f78ff2ba515dfb62ec51849efe677bee2ddfb5eff2ca6e4d36
- MD5 4cb9a4866fb246bfb869dc4d1727b403
- SHA1 7a51b4144aeabf6b477789d9f518e82561739889
- SHA512 c563cc4c29f6a7e11706d12d7b05cb3195b5f30742adde7f1a63df721e2cff111bff6ae5b0209db34d39f84026865d9930bbfff6d6e0be349b353ea84d7e84a7
- SSDEEP 196608:l8Vb618U68Vb618U7/h1+TO8Vb618U68Vb618U7/h1+T/:2cDcQcDcw
- TLSH T19FE68D17F6A480F5D07AD47486A69736EA727C120B319BCB4394F61D2E336D09F3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry