General
- Target 2026-05-29_9b481ddd895c2dfb09624d0e77a3d895_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hawkeye_hijackloader_lumma-stealer_smoke-loader_vidar_wannacry
- Size 2.5MB
- Sample260529-tzaf5ahs51
- SHA256 5622ccbed1688ea602f81cabb7d116808f85b0e983bf7465e752516318702e4d
- MD5 9b481ddd895c2dfb09624d0e77a3d895
- SHA1 9fe9c7e623199e59e294d9d86c601c517c43aa89
- SHA512 e63a973c9118c62151fbd4df6a87122d84ebc7eb238b69b7f058ab8ec50955f38b1b7d1d468199be07305dd4d8764958d1d707965fdb9d53144e29ef1d45bb10
- SSDEEP 49152:g9+fqnstLet3Lyslj4oJdXN0BMOwLloBrugP:g9+fqnstLEhJdXN0B7+st
- TLSH T145C5F61DEEF54E35E076E530A964931D4479BE208D21C60BF284F21DE879FA2B836637
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_9b481ddd895c2dfb09624d0e77a3d895_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_9b481ddd895c2dfb09624d0e77a3d895_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_9b481ddd895c2dfb09624d0e77a3d895_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hawkeye_hijackloader_lumma-stealer_smoke-loader_vidar_wannacry
- Size 2.5MB
- SHA256 5622ccbed1688ea602f81cabb7d116808f85b0e983bf7465e752516318702e4d
- MD5 9b481ddd895c2dfb09624d0e77a3d895
- SHA1 9fe9c7e623199e59e294d9d86c601c517c43aa89
- SHA512 e63a973c9118c62151fbd4df6a87122d84ebc7eb238b69b7f058ab8ec50955f38b1b7d1d468199be07305dd4d8764958d1d707965fdb9d53144e29ef1d45bb10
- SSDEEP 49152:g9+fqnstLet3Lyslj4oJdXN0BMOwLloBrugP:g9+fqnstLEhJdXN0B7+st
- TLSH T145C5F61DEEF54E35E076E530A964931D4479BE208D21C60BF284F21DE879FA2B836637
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.