General
- Target 2026-05-29_2aff4b18857872a94f099ab2664dfeaf_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_rugmi_smoke-loader_vidar
- Size 2.8MB
- Sample260529-ndlpdaat3w
- SHA256 fa710b0f8d5b1cdab614cffb3aef09cc542120ca6566847887de7c110085af4e
- MD5 2aff4b18857872a94f099ab2664dfeaf
- SHA1 dafc7d669bd53d4971762d9557b42c8960422bae
- SHA512 4611b76494d38ae6e6edc04a01058899c67f7855e7cbccbb1235ca5ddcc0cffb579a15b74f263aa8e227bea1f11948d692f42f4779bb0932de27cc475c51c073
- SSDEEP 49152:6EzhE2MfOsNBk9/fw2BwfmM0fJqJtb2IPJ56rawqS:tNvsNi9XwgwfoRlrL
- TLSH T12ED59D21B2F44A32D2B78172D9A1B615AD3B7D210F34A3CB62989E1D3E776C19537323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_2aff4b18857872a94f099ab2664dfeaf_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_2aff4b18857872a94f099ab2664dfeaf_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_2aff4b18857872a94f099ab2664dfeaf_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_rugmi_smoke-loader_vidar
- Size 2.8MB
- SHA256 fa710b0f8d5b1cdab614cffb3aef09cc542120ca6566847887de7c110085af4e
- MD5 2aff4b18857872a94f099ab2664dfeaf
- SHA1 dafc7d669bd53d4971762d9557b42c8960422bae
- SHA512 4611b76494d38ae6e6edc04a01058899c67f7855e7cbccbb1235ca5ddcc0cffb579a15b74f263aa8e227bea1f11948d692f42f4779bb0932de27cc475c51c073
- SSDEEP 49152:6EzhE2MfOsNBk9/fw2BwfmM0fJqJtb2IPJ56rawqS:tNvsNi9XwgwfoRlrL
- TLSH T12ED59D21B2F44A32D2B78172D9A1B615AD3B7D210F34A3CB62989E1D3E776C19537323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.