General
- Target 2026-05-18_a9ed08621e6ed0fc9a7c8c9f82a18dba_cobalt-strike_coinminer_darkgate_elex_gazer_gcleaner_glassworm_helldown_hijackloader_icedid_luca-stealer_njrat_stealc_vidar
- Size 26.6MB
- Sample260518-e7mn4afz6t
- SHA256 e348724a590d1092263983f2e5b279dae288005ee26d5a1a7f0443851f023119
- MD5 a9ed08621e6ed0fc9a7c8c9f82a18dba
- SHA1 b6e0b83c9efbf2d5c3add97d1b6d798c4d2905ad
- SHA512 7fab6efe59e09db64ccfcbdb8b9c5d8829b62431a740b8f03946e5a41474dacd1ee1295c7d10c0a0c63c06eff9601eece6ce3ef731af2e2c93501ca3c4de8a18
- SSDEEP 393216:cWJLCZI5BfFW7hfDr8ICP2tg7ddH/84vZwvYmO9IvPpq:dJLYWTwvByInpq
- TLSH T10F57B0C633D85865C273C2398A63E72BD27F782153109BC7765896AC0E37BC47AB5B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-18_a9ed08621e6ed0fc9a7c8c9f82a18dba_cobalt-strike_coinminer_darkgate_elex_gazer_gcleaner_gla.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-18_a9ed08621e6ed0fc9a7c8c9f82a18dba_cobalt-strike_coinminer_darkgate_elex_gazer_gcleaner_gla.exe
Resource
win11-20260513-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-18_a9ed08621e6ed0fc9a7c8c9f82a18dba_cobalt-strike_coinminer_darkgate_elex_gazer_gcleaner_glassworm_helldown_hijackloader_icedid_luca-stealer_njrat_stealc_vidar
- Size 26.6MB
- SHA256 e348724a590d1092263983f2e5b279dae288005ee26d5a1a7f0443851f023119
- MD5 a9ed08621e6ed0fc9a7c8c9f82a18dba
- SHA1 b6e0b83c9efbf2d5c3add97d1b6d798c4d2905ad
- SHA512 7fab6efe59e09db64ccfcbdb8b9c5d8829b62431a740b8f03946e5a41474dacd1ee1295c7d10c0a0c63c06eff9601eece6ce3ef731af2e2c93501ca3c4de8a18
- SSDEEP 393216:cWJLCZI5BfFW7hfDr8ICP2tg7ddH/84vZwvYmO9IvPpq:dJLYWTwvByInpq
- TLSH T10F57B0C633D85865C273C2398A63E72BD27F782153109BC7765896AC0E37BC47AB5B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1