975fe134bd1b9b38b42367749ab5fbc42c0d82128746354c861d62b878fe98ef

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/05/2026, 16:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-05-24_62833ad6660e4ba925565c1dd312500b_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_gl.exe
Size 3.5MB
Sample260524-txctgaet61
SHA256 975fe134bd1b9b38b42367749ab5fbc42c0d82128746354c861d62b878fe98ef
MD5 62833ad6660e4ba925565c1dd312500b
SHA1 ce500056129025aad9a5e37aa5df5fd96cc8bd05
SHA512 e98ea93d9be3c36b3f21e6aba9244ca8f2b2c167b8f3abf46f5c36ccf8ac96337db6fbfc6142969a5f93a11cc7cd7dd421f59c8208205f77d15c3340f3337a49
SSDEEP 49152:gOpL1M84pvoJdXN0BMOwLloBrugYy6i1zuajsauZnJfj3Pji0AjcW1PszNsQd:9pGfQJdXN0B7+sitrjooW1PszZ
TLSH
T1CD069D16B3E841B5E0739534CAB69215D972B8311B31C6CF6394863D2F73AD29D3AB32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-05-24_62833ad6660e4ba925565c1dd312500b_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_gl.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-24_62833ad6660e4ba925565c1dd312500b_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_gl.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-24_62833ad6660e4ba925565c1dd312500b_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_gl.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:1644

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads