General
- Target 2026-05-23_d6752ef330d526be692a22b3336438f7_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_rhadamanthys_rugmi_smoke-loader_stop_vidar
- Size 3.0MB
- Sample260523-2gr78aez3s
- SHA256 5531cd905d4280cf67545d8404668f0b8aaddee4e32a1cae6b8ba58fe9792677
- MD5 d6752ef330d526be692a22b3336438f7
- SHA1 360dce84bc3a1ee016c09c6d00188710269e008d
- SHA512 3ace9f31020573637ca8b011a8306624bf5302ab5ed47e4c7b6c61f5e88464419d8f8119c6d5c955458d7b01170b2f739c65f9949aa56a0c433ef5d0083afc9b
- SSDEEP 49152:6EzFhKPgssSt2gRhKPgssSt2gTUv3q56rB:tZhv7Stzhv7StV6rB
- TLSH T1D7E53B1277F88539F1F72B719EB592605A7BBD605E35C24F23C02A5E1DB4A809A32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_d6752ef330d526be692a22b3336438f7_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_d6752ef330d526be692a22b3336438f7_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_d6752ef330d526be692a22b3336438f7_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_rhadamanthys_rugmi_smoke-loader_stop_vidar
- Size 3.0MB
- SHA256 5531cd905d4280cf67545d8404668f0b8aaddee4e32a1cae6b8ba58fe9792677
- MD5 d6752ef330d526be692a22b3336438f7
- SHA1 360dce84bc3a1ee016c09c6d00188710269e008d
- SHA512 3ace9f31020573637ca8b011a8306624bf5302ab5ed47e4c7b6c61f5e88464419d8f8119c6d5c955458d7b01170b2f739c65f9949aa56a0c433ef5d0083afc9b
- SSDEEP 49152:6EzFhKPgssSt2gRhKPgssSt2gTUv3q56rB:tZhv7Stzhv7StV6rB
- TLSH T1D7E53B1277F88539F1F72B719EB592605A7BBD605E35C24F23C02A5E1DB4A809A32733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.