General
- Target 2026-07-07_3f2018f624b857b4a7d9605887ea783a_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_remcos
- Size 20.8MB
- Sample260707-mpsfmaf14x
- SHA256 fea2c9d239a3f1da4083c0c783ee33e23f029ad30226dd323bd5f09f5563771a
- MD5 3f2018f624b857b4a7d9605887ea783a
- SHA1 9dfa11936b4b56f3c9dd61f62c448596ef6df0e0
- SHA512 43499a0b407a24bec707f4cba256ea6b53989973142e0844331c73b4b79477df38fb84bd96bc010fbde02e488a83971dfbcef5ccceb67e6cfd8aafcf7b3badf6
- SSDEEP 393216:Bm2SlLdNPt6CZl05YflfxgkTVfdBL/tEJ1+lFj99e2xXX+QU9DrFkpBg:iLPPrZl05Yt+kTVTL/xlFVaP1
- TLSH T13027AD23E64180B1C0422179CC2AEABD517DBE15873456C733947D2BBA72BC3AA3D75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_3f2018f624b857b4a7d9605887ea783a_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_3f2018f624b857b4a7d9605887ea783a_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win11ltsc2024-20260706-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_3f2018f624b857b4a7d9605887ea783a_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hellokitty_hijackloader_luca-stealer_njrat_remcos
- Size 20.8MB
- SHA256 fea2c9d239a3f1da4083c0c783ee33e23f029ad30226dd323bd5f09f5563771a
- MD5 3f2018f624b857b4a7d9605887ea783a
- SHA1 9dfa11936b4b56f3c9dd61f62c448596ef6df0e0
- SHA512 43499a0b407a24bec707f4cba256ea6b53989973142e0844331c73b4b79477df38fb84bd96bc010fbde02e488a83971dfbcef5ccceb67e6cfd8aafcf7b3badf6
- SSDEEP 393216:Bm2SlLdNPt6CZl05YflfxgkTVfdBL/tEJ1+lFj99e2xXX+QU9DrFkpBg:iLPPrZl05Yt+kTVTL/xlFVaP1
- TLSH T13027AD23E64180B1C0422179CC2AEABD517DBE15873456C733947D2BBA72BC3AA3D75B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory