General
- Target 2026-07-02_d0c6f78b3d5e1eea57025c4087b84358_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_icedid_njrat_rhadamanthys_rugmi_smoke-loader_stop_vidar
- Size 4.5MB
- Sample260702-tya19shx3w
- SHA256 a6645b52e675e811212c732423a17ca0bb8be3f45711366e97f3d5ea170f6531
- MD5 d0c6f78b3d5e1eea57025c4087b84358
- SHA1 6a7427c558180ef2b263fed455c9e3da91b5e5b6
- SHA512 29bf49e29de2c17754115b2c3a82c8117b766f2853a332d98e189097db769cbcd225cf18c17e77c68d73c0baeac85c0606913ad4fdbf63739c275a3bdbcdbf9f
- SSDEEP 49152:QEzuhKPgssSt2g7ceW4SkZP4sz9MbbYcL2y6i1zuajsauZnJGPji0Ajd4:7ahv7StJIfkZcbYcL2tMjoi
- TLSH T16B264B16B2F88226E0B39575C9A696A5EA327C511B30C5CF1380B77D2F33AD1D936732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_d0c6f78b3d5e1eea57025c4087b84358_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_d0c6f78b3d5e1eea57025c4087b84358_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win11ltsc2024-20260630-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_d0c6f78b3d5e1eea57025c4087b84358_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_icedid_njrat_rhadamanthys_rugmi_smoke-loader_stop_vidar
- Size 4.5MB
- SHA256 a6645b52e675e811212c732423a17ca0bb8be3f45711366e97f3d5ea170f6531
- MD5 d0c6f78b3d5e1eea57025c4087b84358
- SHA1 6a7427c558180ef2b263fed455c9e3da91b5e5b6
- SHA512 29bf49e29de2c17754115b2c3a82c8117b766f2853a332d98e189097db769cbcd225cf18c17e77c68d73c0baeac85c0606913ad4fdbf63739c275a3bdbcdbf9f
- SSDEEP 49152:QEzuhKPgssSt2g7ceW4SkZP4sz9MbbYcL2y6i1zuajsauZnJGPji0Ajd4:7ahv7StJIfkZcbYcL2tMjoi
- TLSH T16B264B16B2F88226E0B39575C9A696A5EA327C511B30C5CF1380B77D2F33AD1D936732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.