General
- Target 2026-07-07_9c32d7270066f71750b73a3a5f521b1a_amadey_cobalt-strike_elex_play
- Size 143KB
- Sample260707-l7vs2afv7s
- SHA256 412935744ed227499c87ca81e3a518d0fd29134f0fc13eb410fea4b92aa97fbd
- MD5 9c32d7270066f71750b73a3a5f521b1a
- SHA1 0221bea00e873cc095ccd17c0c696e9c0739c5de
- SHA512 1533865d8bbc4768b0c564fa953401bb8a30521631dde7aa945e488fcf9fca392a5d80413f26fd45e45cefc00bd4c17cb9a5931621ebf9dee284dacf80d9c280
- SSDEEP 3072:CJNw03ZVSMOPoxnn11k+Ue/xtX/tnRPF9EVnb43jaI5grI2v0:8NX7SMrnrYeb/tnRPF9cCGrI2v
- TLSH T145E39E12B6D2C536E6B1093428768A91CA3DBC914B715DAB3B94367E8F302D0E532E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_9c32d7270066f71750b73a3a5f521b1a_amadey_cobalt-strike_elex_play.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_9c32d7270066f71750b73a3a5f521b1a_amadey_cobalt-strike_elex_play.exe
Resource
win11ltsc2024-20260706-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_9c32d7270066f71750b73a3a5f521b1a_amadey_cobalt-strike_elex_play
- Size 143KB
- SHA256 412935744ed227499c87ca81e3a518d0fd29134f0fc13eb410fea4b92aa97fbd
- MD5 9c32d7270066f71750b73a3a5f521b1a
- SHA1 0221bea00e873cc095ccd17c0c696e9c0739c5de
- SHA512 1533865d8bbc4768b0c564fa953401bb8a30521631dde7aa945e488fcf9fca392a5d80413f26fd45e45cefc00bd4c17cb9a5931621ebf9dee284dacf80d9c280
- SSDEEP 3072:CJNw03ZVSMOPoxnn11k+Ue/xtX/tnRPF9EVnb43jaI5grI2v0:8NX7SMrnrYeb/tnRPF9cCGrI2v
- TLSH T145E39E12B6D2C536E6B1093428768A91CA3DBC914B715DAB3B94367E8F302D0E532E67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.