General
- Target 2026-09-10_3d5963277a2cd612e257d6a3901b8667_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 32.3MB
- Sample260910-wgv18aep9v
- SHA256 765189768851d40ecaa4c2b4be4e8a9d66df03b106c848c6c0bcdc57b017eb24
- MD5 3d5963277a2cd612e257d6a3901b8667
- SHA1 23d4ddc98964210a8bb2fd98fa595f30bdcc1558
- SHA512 d3896ae3271848c6c42d1a456bedf1d143106bf8a9f588b2e25291220bba03add4d9231b8f1af752f0d15d0461432fd43e0dfe230ef57bd119d927772666582c
- SSDEEP 196608:IkQkjGnKikQkjGnKBkQkjGnKikQkjGnKHoK:7G6GzG6GKo
- TLSH T19D779D02B6A480F5D2A6853455B79777F671BC050B309BDF9364EB192E337D0AE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_3d5963277a2cd612e257d6a3901b8667_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_3d5963277a2cd612e257d6a3901b8667_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawk.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_3d5963277a2cd612e257d6a3901b8667_amadey_cobalt-strike_darkgate_elex_emotet_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stealc_vidar_wannacry
- Size 32.3MB
- SHA256 765189768851d40ecaa4c2b4be4e8a9d66df03b106c848c6c0bcdc57b017eb24
- MD5 3d5963277a2cd612e257d6a3901b8667
- SHA1 23d4ddc98964210a8bb2fd98fa595f30bdcc1558
- SHA512 d3896ae3271848c6c42d1a456bedf1d143106bf8a9f588b2e25291220bba03add4d9231b8f1af752f0d15d0461432fd43e0dfe230ef57bd119d927772666582c
- SSDEEP 196608:IkQkjGnKikQkjGnKBkQkjGnKikQkjGnKHoK:7G6GzG6GKo
- TLSH T19D779D02B6A480F5D2A6853455B79777F671BC050B309BDF9364EB192E337D0AE3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application