General
- Target 2026-05-27_556ef72feeb898fc69ff6bcbb42a86e9_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hawkeye_hijackloader_lumma-stealer_smoke-loader_vidar
- Size 3.6MB
- Sample260527-r4ycmsgx3n
- SHA256 5c6f6ca83b2c99a75883a48542ccd9f321ee637fc34990d88403b707b3e672d2
- MD5 556ef72feeb898fc69ff6bcbb42a86e9
- SHA1 cdc34b053c5792af184d378b73daa3aeec1a73f3
- SHA512 b8002eeb683d35686b23acafed3719881ffe30ec8c447709092fbad4e2ae8d279ec3dc2ca036f07958c57841a73f0b1671836d0dde0a523b7b88f4416448c081
- SSDEEP 49152:g9+fqnstLet3Lyslj4oJdXN0BMOwLloBrugt1opwBDx00ZIt8tDZqrKLn:g9+fqnstLEhJdXN0B7+sMm
- TLSH T10206391DEEF44E75E076E1349A61832DE175BE204E21D60BF240F21DE93AFA16936732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-27_556ef72feeb898fc69ff6bcbb42a86e9_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-27_556ef72feeb898fc69ff6bcbb42a86e9_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-27_556ef72feeb898fc69ff6bcbb42a86e9_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hawkeye_hijackloader_lumma-stealer_smoke-loader_vidar
- Size 3.6MB
- SHA256 5c6f6ca83b2c99a75883a48542ccd9f321ee637fc34990d88403b707b3e672d2
- MD5 556ef72feeb898fc69ff6bcbb42a86e9
- SHA1 cdc34b053c5792af184d378b73daa3aeec1a73f3
- SHA512 b8002eeb683d35686b23acafed3719881ffe30ec8c447709092fbad4e2ae8d279ec3dc2ca036f07958c57841a73f0b1671836d0dde0a523b7b88f4416448c081
- SSDEEP 49152:g9+fqnstLet3Lyslj4oJdXN0BMOwLloBrugt1opwBDx00ZIt8tDZqrKLn:g9+fqnstLEhJdXN0B7+sMm
- TLSH T10206391DEEF44E75E076E1349A61832DE175BE204E21D60BF240F21DE93AFA16936732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.