General
- Target 2026-07-02_05813bd25282368fec3998554ae47a33_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_smoke-loader_stop_tofsee_vidar_wannacry
- Size 8.8MB
- Sample260702-w39rhahs9r
- SHA256 a1438714d428c6a14390b05e56c7e697d3ce21d9dd4b8d0bf009dbc4d2802b84
- MD5 05813bd25282368fec3998554ae47a33
- SHA1 ad0a57660322f7080aae6915a660e049937118d6
- SHA512 dd4cc357482bc530ec312150e801107351d5c72d8a7ace8c757d5298a070b6b38b64485bcf89ca4a1072f711507d681681608505a223b64b97ef2bd155818be1
- SSDEEP 98304:kIOERqd/6hkB/qoHMdnJE7hAlKnsz2C2PYdhIqHpnq0E4jovLapIM:SEYd/6ZJEul4szEonqtaovcIM
- TLSH T156968C317992C175D2624070CF99AFB5C2A9BC354BF145C77680BBEA1E322C27E35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_05813bd25282368fec3998554ae47a33_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_05813bd25282368fec3998554ae47a33_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win11ltsc2024-20260630-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_05813bd25282368fec3998554ae47a33_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_smoke-loader_stop_tofsee_vidar_wannacry
- Size 8.8MB
- SHA256 a1438714d428c6a14390b05e56c7e697d3ce21d9dd4b8d0bf009dbc4d2802b84
- MD5 05813bd25282368fec3998554ae47a33
- SHA1 ad0a57660322f7080aae6915a660e049937118d6
- SHA512 dd4cc357482bc530ec312150e801107351d5c72d8a7ace8c757d5298a070b6b38b64485bcf89ca4a1072f711507d681681608505a223b64b97ef2bd155818be1
- SSDEEP 98304:kIOERqd/6hkB/qoHMdnJE7hAlKnsz2C2PYdhIqHpnq0E4jovLapIM:SEYd/6ZJEul4szEonqtaovcIM
- TLSH T156968C317992C175D2624070CF99AFB5C2A9BC354BF145C77680BBEA1E322C27E35B26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory