General
- Target 2026-05-22_82e4689878238683ce155c25ba074ad5_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_rhadamanthys_rugmi_smoke-loader_stop_vidar
- Size 3.8MB
- Sample260522-vpzhyadw31
- SHA256 53fed3e1e0a19fce2d683ff322d8c8026967f1153a7a49cf0917d8c5d2c11968
- MD5 82e4689878238683ce155c25ba074ad5
- SHA1 5e31d0397cf21e192ea9ff557084e62b3bf10247
- SHA512 3d1f8479f4a48212dd2dde35e61cbdfc7212b15e4f5383e18ebc0a6950ffbe29d477d27ebeedc10e9e32e92dbc702ec053b9b3dabdff9e0b22b658522adb3546
- SSDEEP 49152:6EzFhKPgssSt2gRhKPgssSt2gTUv33eW4SkZP4sz9Mbem:tZhv7Stzhv7StV6fkZcem
- TLSH T137065A12B7F88236F1F3A6B1DDF5A264AA767C615B31C58F1380522E1D75A90DA32333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_82e4689878238683ce155c25ba074ad5_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_82e4689878238683ce155c25ba074ad5_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_82e4689878238683ce155c25ba074ad5_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_rhadamanthys_rugmi_smoke-loader_stop_vidar
- Size 3.8MB
- SHA256 53fed3e1e0a19fce2d683ff322d8c8026967f1153a7a49cf0917d8c5d2c11968
- MD5 82e4689878238683ce155c25ba074ad5
- SHA1 5e31d0397cf21e192ea9ff557084e62b3bf10247
- SHA512 3d1f8479f4a48212dd2dde35e61cbdfc7212b15e4f5383e18ebc0a6950ffbe29d477d27ebeedc10e9e32e92dbc702ec053b9b3dabdff9e0b22b658522adb3546
- SSDEEP 49152:6EzFhKPgssSt2gRhKPgssSt2gTUv33eW4SkZP4sz9Mbem:tZhv7Stzhv7StV6fkZcem
- TLSH T137065A12B7F88236F1F3A6B1DDF5A264AA767C615B31C58F1380522E1D75A90DA32333
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.