Overview
overview
10Static
static
102026-05-16...gl.exe
windows10-2004-x64
72026-05-16...gl.exe
windows11-21h2-x64
7$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-21h2-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-21h2-x64
3General
- Target 2026-05-16_ee584e5d766c2e0ed2f3e05bb4a77a27_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 116.1MB
- Sample260516-sjc2msfs6t
- SHA256 986729493bf4c7f07585a4d8d9927844947a0cbb8865ee1f00d78044912719dd
- MD5 ee584e5d766c2e0ed2f3e05bb4a77a27
- SHA1 fb3ddc7d57b0b32d809266cbff833a985b540e30
- SHA512 9392a6388cc9c322d1d5e0759228dde44953a15c1fa5fadaf77af4fdfb4c66f5595197548ea38a9939caf09a9e5bfcc58f5337e044118c9c2afa6ea1a65dad8b
- SSDEEP 1572864:/7xkYy4KP2e39gNQHbePjrUOhNa+NqsSLf9p+6rsqfzJOjuzNWyMmHMq7yrKa96B:/k4q2eNgOtOhNBQLdosKUJyp96B
- TLSH T1FE486943B1F383A8E06551704A6B5E76C1F96D21C72C4CDFA9843B3F1A719D27B23A1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-16_ee584e5d766c2e0ed2f3e05bb4a77a27_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_gl.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
2026-05-16_ee584e5d766c2e0ed2f3e05bb4a77a27_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_gl.exe
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/DcryptDll.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/DcryptDll.dll
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20260513-en
Malware Config
Targets
-
- Target 2026-05-16_ee584e5d766c2e0ed2f3e05bb4a77a27_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar_wannacry
- Size 116.1MB
- SHA256 986729493bf4c7f07585a4d8d9927844947a0cbb8865ee1f00d78044912719dd
- MD5 ee584e5d766c2e0ed2f3e05bb4a77a27
- SHA1 fb3ddc7d57b0b32d809266cbff833a985b540e30
- SHA512 9392a6388cc9c322d1d5e0759228dde44953a15c1fa5fadaf77af4fdfb4c66f5595197548ea38a9939caf09a9e5bfcc58f5337e044118c9c2afa6ea1a65dad8b
- SSDEEP 1572864:/7xkYy4KP2e39gNQHbePjrUOhNa+NqsSLf9p+6rsqfzJOjuzNWyMmHMq7yrKa96B:/k4q2eNgOtOhNBQLdosKUJyp96B
- TLSH T1FE486943B1F383A8E06551704A6B5E76C1F96D21C72C4CDFA9843B3F1A719D27B23A1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target $PLUGINSDIR/DcryptDll.dll
- Size 20KB
- SHA256 ad313f94da4ab0980173e60cbda7d1510e92fb49d2359224e0f89dc3ec0584e7
- MD5 0a5e967b684d6f3db31cffb619cc0222
- SHA1 2ed62db69f3ef5b0294805e326e3f41e5b3b0ac5
- SHA512 9cf83f8827aafba394befe1a7c91cf6e12ccadc0767fd1934a823e951b6b6cb24ecf7ee56a4c012c162a41900de0c5f1820ca6fd6836bc474881d9f23e966954
- SSDEEP 384:k3tsJOACduC6f6o14y5+UKjNLUtTQdCLXXCBwnp:k3tsJOhuDC44y5uLEeCLXSBwnp
- TLSH T1E492D750CAD10420E0B322BA7AF955129CF87E321836610FFEB7065B6D78AD76767732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/InstallOptions.dll
- Size 15KB
- SHA256 dd0d1a8c4511261333e90a94d9912000592c46731b615aa7a37cd2b3eb6a8d58
- MD5 7854290f8bc473fb9fad1917b0065731
- SHA1 27c0e4731e395dfe612d954bf8793c533c53ef8f
- SHA512 736030a5e1b744d0f96745f9933a57f5b52361288d33aeeaad12e054c47c4bb705cfc7d5cd4a5e3e667a6c6252e1c2a573b2707241d7b73b60c73daf2de52038
- SSDEEP 192:EJGQtZkTktEQUrJaZfuyCnSmUsv3sY7L7cW8Y6Q86QvoT2g11929WtshLAzgSrX8:EJNt+4t7uJalUnGesY7Lt8nC3/Yosa
- TLSH T1E9624D1137D598B3E2E62A797EF373138FA5FB22A4428E0BC7332E0638565805D78311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
- MD5 6d08f0d5503bb100b8429fefaad163a6
- SHA1 2a79aac2d3b715326c3dcd3c5cf2e33de3632a0a
- SHA512 e259b1aff39c533e3e31cf4eb323c8eb22b2beeb5d8ce2c929de30702a6d8ab8076aeacc983d724b05d7d99a6de8c4d239bd159642c7e75fb86faef683360a1f
- SSDEEP 192:cjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZr0QPi:s/Qlt7wiij/lMRv/9V4brr
- TLSH T1A9427C1297B089F2F151093819667F2A6FBEAC5C23F405A3CFE304C63D212CB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
- MD5 c953dd0aab774f1446fcd63fa7c5f613
- SHA1 6b7e1ef30b3ce2b353d310a8c99111c01e1f752e
- SHA512 7fdfc451ada1789ad44a33fee7a97acf9f482ae58b5207564ce8ac90fbc8b0fc891bc02d8c1d9a1d0d3fb77954106115582080e129bb93634a2cb16777201e14
- SSDEEP 96:JbzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHwDQ:JEQHDb2vSuOc41ZfUNQZGdHo
- TLSH T15EE1093571C02DF7D08D897438167D2F83F4D52627BA05A046771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10