General
- Target 2026-05-25_b1fdbc066cbfdf48c655233a2e1719a2_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_rhadamanthys_rugmi_smoke-loader_stop_vidar
- Size 3.1MB
- Sample260525-mf9csagx2x
- SHA256 920ee9c5a286b08900af00b4dffc23c0954781ae2f155f9892b36650dcfa0999
- MD5 b1fdbc066cbfdf48c655233a2e1719a2
- SHA1 2bf345c3bef9223ff04ee0e73330bdaf64d36e09
- SHA512 8d9dfea8b1d9f8ec2a8ee68bbb1664dfcf02c85cc757a91a0daaf44bc707f40b3731d6ceff13c095a5d3012c4e2f0700ab122b710bde3353fb40a027df52f307
- SSDEEP 49152:QEzuhKPgssSt2g7ceW4SkZP4sz9MbbhOH:7ahv7StJIfkZcb6
- TLSH T139E53912B2F88226E0F396B5D9B597A5AD327C611F30C5CF1280762D2E72AC1D632737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-25_b1fdbc066cbfdf48c655233a2e1719a2_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-25_b1fdbc066cbfdf48c655233a2e1719a2_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-25_b1fdbc066cbfdf48c655233a2e1719a2_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_rhadamanthys_rugmi_smoke-loader_stop_vidar
- Size 3.1MB
- SHA256 920ee9c5a286b08900af00b4dffc23c0954781ae2f155f9892b36650dcfa0999
- MD5 b1fdbc066cbfdf48c655233a2e1719a2
- SHA1 2bf345c3bef9223ff04ee0e73330bdaf64d36e09
- SHA512 8d9dfea8b1d9f8ec2a8ee68bbb1664dfcf02c85cc757a91a0daaf44bc707f40b3731d6ceff13c095a5d3012c4e2f0700ab122b710bde3353fb40a027df52f307
- SSDEEP 49152:QEzuhKPgssSt2g7ceW4SkZP4sz9MbbhOH:7ahv7StJIfkZcb6
- TLSH T139E53912B2F88226E0F396B5D9B597A5AD327C611F30C5CF1280762D2E72AC1D632737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.