General
- Target 2026-05-29_d26d870e88f076408022a31ca331695c_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_rugmi_smoke-loader_vidar
- Size 3.3MB
- Sample260529-we7bgady3l
- SHA256 3d6a21c9ad216c90cc5ba9e0e2260089e9b2abed10caf0bd7f77f8ab1ff4ee8a
- MD5 d26d870e88f076408022a31ca331695c
- SHA1 f9c1b53abc210a46f29bb86dcef68c04cb976253
- SHA512 ae6c34bf70c033156ac25222a35b03e6d577cdba06cdf02eea1ff451c2a39b1a5599265aad38a6cb55278bbd3fae90976d3b6dc8d563fbc441bc23aefcc23915
- SSDEEP 49152:6EzhE2MfOsNBk9/fw2BwfmM0fJqJtb2IerGMy6i1zuajsauZnJG:tNvsNi9XwgwfoRbt2
- TLSH T1A3F56A26F2A44261D17B8135CBA2A225F93378311F7097CB52C4DA3D3F76AD0A97A713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-29_d26d870e88f076408022a31ca331695c_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_d26d870e88f076408022a31ca331695c_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_d26d870e88f076408022a31ca331695c_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_rugmi_smoke-loader_vidar
- Size 3.3MB
- SHA256 3d6a21c9ad216c90cc5ba9e0e2260089e9b2abed10caf0bd7f77f8ab1ff4ee8a
- MD5 d26d870e88f076408022a31ca331695c
- SHA1 f9c1b53abc210a46f29bb86dcef68c04cb976253
- SHA512 ae6c34bf70c033156ac25222a35b03e6d577cdba06cdf02eea1ff451c2a39b1a5599265aad38a6cb55278bbd3fae90976d3b6dc8d563fbc441bc23aefcc23915
- SSDEEP 49152:6EzhE2MfOsNBk9/fw2BwfmM0fJqJtb2IerGMy6i1zuajsauZnJG:tNvsNi9XwgwfoRbt2
- TLSH T1A3F56A26F2A44261D17B8135CBA2A225F93378311F7097CB52C4DA3D3F76AD0A97A713
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.