General
- Target 2026-08-24_92142dcb22cc5fd880a3763822115725_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 11.9MB
- Sample260825-jbk8lsfk6v
- SHA256 26e55a2783504a1e6a90e3f38b49e30eb80d2e78c7cc14465f1ddfcd13134eb5
- MD5 92142dcb22cc5fd880a3763822115725
- SHA1 7e37aca5159acce1840f1d487b03c408c54197f3
- SHA512 dd5532c71b79ffac0da64811f66bcb6cfa6cb53a92e6a2eae283ea9700cdfd752d8be9c059fd5dad283cd853b10d2fed765c8e3659d371c97ce7617ab28e847f
- SSDEEP 98304:He5x6c19a9oVklJKVMNSe5x6c19a9oVklJKVMNThx0z:gI9kkLCMLI9kkLCMLKz
- TLSH T1B1C6F843F293C85FE299D4308A25C63156617FBD87F385AFB95CB18DFA362837520A12
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-24_92142dcb22cc5fd880a3763822115725_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_92142dcb22cc5fd880a3763822115725_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_92142dcb22cc5fd880a3763822115725_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_vidar
- Size 11.9MB
- SHA256 26e55a2783504a1e6a90e3f38b49e30eb80d2e78c7cc14465f1ddfcd13134eb5
- MD5 92142dcb22cc5fd880a3763822115725
- SHA1 7e37aca5159acce1840f1d487b03c408c54197f3
- SHA512 dd5532c71b79ffac0da64811f66bcb6cfa6cb53a92e6a2eae283ea9700cdfd752d8be9c059fd5dad283cd853b10d2fed765c8e3659d371c97ce7617ab28e847f
- SSDEEP 98304:He5x6c19a9oVklJKVMNSe5x6c19a9oVklJKVMNThx0z:gI9kkLCMLI9kkLCMLKz
- TLSH T1B1C6F843F293C85FE299D4308A25C63156617FBD87F385AFB95CB18DFA362837520A12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry