General
- Target 2026-07-06_3d9dfe00cff158e8f806f7ba99ddac32_amadey_cobalt-strike_elex_play
- Size 148KB
- Sample260706-1texzscs6y
- SHA256 1916ddc3f7024f81812fe0eff90624d56693c362af6dd1c6ecda99261db9347d
- MD5 3d9dfe00cff158e8f806f7ba99ddac32
- SHA1 4fb07bcf2041d57306215c56df6c8d5c28a74586
- SHA512 1a206066b1aead6da888f5a6405d81819523fd306bdcd259270ded00a034e2add08363853d9ac224a69d5ddf7f1d2e533915ea66c183a01ef1d3afd7cca9e8ac
- SSDEEP 3072:1JEXiJu7COG12zuf9AxnPKiadKSUoxzWCtnRPF9EVnb43jaI5grI2v0:0K9J2JPT/SUxCtnRPF9cCGrI2v
- TLSH T13DE3AF13BAC2D475F671083428769A91CA3FFC815F615EAB3B98357A4F341C09932EA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_3d9dfe00cff158e8f806f7ba99ddac32_amadey_cobalt-strike_elex_play.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_3d9dfe00cff158e8f806f7ba99ddac32_amadey_cobalt-strike_elex_play.exe
Resource
win11ltsc2024-20260706-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_3d9dfe00cff158e8f806f7ba99ddac32_amadey_cobalt-strike_elex_play
- Size 148KB
- SHA256 1916ddc3f7024f81812fe0eff90624d56693c362af6dd1c6ecda99261db9347d
- MD5 3d9dfe00cff158e8f806f7ba99ddac32
- SHA1 4fb07bcf2041d57306215c56df6c8d5c28a74586
- SHA512 1a206066b1aead6da888f5a6405d81819523fd306bdcd259270ded00a034e2add08363853d9ac224a69d5ddf7f1d2e533915ea66c183a01ef1d3afd7cca9e8ac
- SSDEEP 3072:1JEXiJu7COG12zuf9AxnPKiadKSUoxzWCtnRPF9EVnb43jaI5grI2v0:0K9J2JPT/SUxCtnRPF9cCGrI2v
- TLSH T13DE3AF13BAC2D475F671083428769A91CA3FFC815F615EAB3B98357A4F341C09932EA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.