General
- Target 2026-08-24_d0cdd7fd6cee84d6cd496c5b666a6c75_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_remcos_smoke-loader_vidar_wannacry
- Size 15.3MB
- Sample260825-atdrtafe78
- SHA256 d33898331be16fe66b5097d38e1e09233fbb7a05b0228eba0910107b6254d513
- MD5 d0cdd7fd6cee84d6cd496c5b666a6c75
- SHA1 f2d28f5e37b6859195b4467edaa8f8737b54541f
- SHA512 cbcdb66c8ddd6ace1cd055d2a2e867cc9df3a52f89d29af1127abeeea8edac343c79e2efa4eea35680e476825e3b552cd2be4ccf94d10dce07cb017f1268a930
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2VjnmDte5x6c1/e5x6c1ze5x6c1/e5+:IkQkjGnKikQkjGnKY
- TLSH T1F3F69D06B6A480F5D2A6863455B79777F671BC050B309BDF9364DB192E337C0AE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_d0cdd7fd6cee84d6cd496c5b666a6c75_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_d0cdd7fd6cee84d6cd496c5b666a6c75_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_d0cdd7fd6cee84d6cd496c5b666a6c75_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_remcos_smoke-loader_vidar_wannacry
- Size 15.3MB
- SHA256 d33898331be16fe66b5097d38e1e09233fbb7a05b0228eba0910107b6254d513
- MD5 d0cdd7fd6cee84d6cd496c5b666a6c75
- SHA1 f2d28f5e37b6859195b4467edaa8f8737b54541f
- SHA512 cbcdb66c8ddd6ace1cd055d2a2e867cc9df3a52f89d29af1127abeeea8edac343c79e2efa4eea35680e476825e3b552cd2be4ccf94d10dce07cb017f1268a930
- SSDEEP 98304:Pe5x6c1/e5x6c1ze5x6c1/e5x6c1Mz+oq2VjnmDte5x6c1/e5x6c1ze5x6c1/e5+:IkQkjGnKikQkjGnKY
- TLSH T1F3F69D06B6A480F5D2A6863455B79777F671BC050B309BDF9364DB192E337C0AE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry