Analysis
- max time kernel
0s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
28/05/2026, 14:59
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-28_53403d103fb48f886875b7012203369d_amadey_cobalt-strike_coinminer_darkgate_hijackloader_ice.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-28_53403d103fb48f886875b7012203369d_amadey_cobalt-strike_coinminer_darkgate_hijackloader_ice.exe
Resource
win11-20260513-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-05-28_53403d103fb48f886875b7012203369d_amadey_cobalt-strike_coinminer_darkgate_hijackloader_ice.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-05-28_53403d103fb48f886875b7012203369d_amadey_cobalt-strike_coinminer_darkgate_hijackloader_ice.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-05-28_53403d103fb48f886875b7012203369d_amadey_cobalt-strike_coinminer_darkgate_hijackloader_ice.exe
- Size 17.7MB
- Sample260528-scvm4sdt71
- SHA256 9c428d18dc4e8f8952d75485cffb9ac205977d88ae3536174f774df63a48d4d0
- MD5 53403d103fb48f886875b7012203369d
- SHA1 be1612edf56e139bfd96afca62bd217a3c7f8a39
- SHA512 2f85596d75ed256638774b786bcc21976e6e43842e6eb6346119ca92d8f0fea250dd48604245d3d2073e246159e9bd8573df9167926e92dd01d584ac33ee5a30
- SSDEEP 393216:51/25y1/25y1/25y1/25y1/25y1/25y1/25y1/25y1/25y1/25y1/25y1/25b:5l25yl25yl25yl25yl25yl25yl25yl2l
- TLSH T17217C03667955012E7B245B6ED28C1B0BD38BE34135089AFA7D0FE1C2E794D1BA7B342
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10