Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
09/05/2026, 15:55
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-05-09_3d967dae1aea7f55e17a990a54e8592d_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_elex.exe
Resource
win10v2004-20250619-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-09_3d967dae1aea7f55e17a990a54e8592d_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_elex.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target 2026-05-09_3d967dae1aea7f55e17a990a54e8592d_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_elex.exe
- Size 45.0MB
- Sample260509-tc7hcah19s
- SHA256 1780f7a1d0848997a0a08f5292b2124e6e4592fd4067475ee23b1c44be168fc1
- MD5 3d967dae1aea7f55e17a990a54e8592d
- SHA1 2d47319085e0c0a75cf60b323c1458c0d10d653e
- SHA512 b857198dc2cc2ae85b6e89ca72148d8ba4d4d475198a5df12a78d46ef27274b0fabf5f11abb01c924fd942b510e529ba1b82c1994affd4d9e0e52d64759dd8a4
- SSDEEP 786432:QEIvm9EIvm9EIvm9EIvm9EIvm9EIvm9EIvm9EIvm9EIvm:AmJmJmJmJmJmJmJmJm
- TLSH T108A7CF0177D84039F5B316328A36A2196A7DBCA59E13DE4F12842DED7BF1690CA39337
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-05-09_3d967dae1aea7f55e17a990a54e8592d_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_elex.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-05-09_3d967dae1aea7f55e17a990a54e8592d_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_elex.exe"C:\Users\Admin\AppData\Local\Temp\2026-05-09_3d967dae1aea7f55e17a990a54e8592d_agent-tesla_amadey_cobalt-strike_coinminer_darkgate_elex.exe"1⤵
- System Location Discovery: System Language Discovery
PID:5784