General
- Target 2026-05-28_03a5ddd72995e9b24cbbb023cb6ab2cd_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_lumma-stealer_smoke-loader_vidar
- Size 3.2MB
- Sample260528-rewgrabt7w
- SHA256 938ab497a835d19c5c0e5acba25a4749df708b276edca0770acc8ae70c04dbb7
- MD5 03a5ddd72995e9b24cbbb023cb6ab2cd
- SHA1 e6d8e27194069a490edbafc94096df700255f285
- SHA512 913d9a7c8819c080a180f36417026cbf56b17958ffeaa2565241893734af5d04df908273236d4a00072699e537918aee7de583026d0865f114b446af0bb287da
- SSDEEP 49152:g9+fqnstLet3Lyslj4oJdXN0BMOwLloBrugt1opwBDx00ZIQT:g9+fqnstLEhJdXN0B7+srT
- TLSH T1D4F5191DEEF14D35E076E1309961830D91757E20CE22CA4BB240FA9DFAB9FA17935632
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-28_03a5ddd72995e9b24cbbb023cb6ab2cd_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_03a5ddd72995e9b24cbbb023cb6ab2cd_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-28_03a5ddd72995e9b24cbbb023cb6ab2cd_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hawkeye_hijackloader_icedid_lumma-stealer_smoke-loader_vidar
- Size 3.2MB
- SHA256 938ab497a835d19c5c0e5acba25a4749df708b276edca0770acc8ae70c04dbb7
- MD5 03a5ddd72995e9b24cbbb023cb6ab2cd
- SHA1 e6d8e27194069a490edbafc94096df700255f285
- SHA512 913d9a7c8819c080a180f36417026cbf56b17958ffeaa2565241893734af5d04df908273236d4a00072699e537918aee7de583026d0865f114b446af0bb287da
- SSDEEP 49152:g9+fqnstLet3Lyslj4oJdXN0BMOwLloBrugt1opwBDx00ZIQT:g9+fqnstLEhJdXN0B7+srT
- TLSH T1D4F5191DEEF14D35E076E1309961830D91757E20CE22CA4BB240FA9DFAB9FA17935632
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.