General
- Target 2026-07-11_28baab6b865fb8ee1823fe9f554774b8_akira_amadey_cobalt-strike_coinminer_darkgate_elex_frostygoop_glassworm_hijackloader_hive_icedid_njrat_poet-rat_remcos_salatstealer_sliver_smoke-loader_snatch_stealc_vidar
- Size 878.9MB
- Sample260711-feptesby8n
- SHA256 b552883c12accce50dc36c5b71866e28d9262ea1080508e4e84651200563ba99
- MD5 28baab6b865fb8ee1823fe9f554774b8
- SHA1 541d39050f4b65e09d0ff339f62c561e22b9cf6d
- SHA512 02d7947ede9e81511363a6120828183dbdfc37c5a12fc10cc6b5a90384ad9436810bcfbe8341082ca4dc127bea2d028a48a482cb843936f6610caecd49b5c2a0
- SSDEEP 393216:cRmRQMH65WXzgNGB5ZQH+HEOz3cYFiVTVj9ZvQlhjmnLtfaDGn:42QMacbKxObchTbJQlcZ
- TLSH T1F2A9CE02B7E80066F1B7563099B79A16EB36BC611B31C3DF1294A26D2E737C09E35727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-11_28baab6b865fb8ee1823fe9f554774b8_akira_amadey_cobalt-strike_coinminer_darkgate_elex_frost.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_28baab6b865fb8ee1823fe9f554774b8_akira_amadey_cobalt-strike_coinminer_darkgate_elex_frost.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_28baab6b865fb8ee1823fe9f554774b8_akira_amadey_cobalt-strike_coinminer_darkgate_elex_frostygoop_glassworm_hijackloader_hive_icedid_njrat_poet-rat_remcos_salatstealer_sliver_smoke-loader_snatch_stealc_vidar
- Size 878.9MB
- SHA256 b552883c12accce50dc36c5b71866e28d9262ea1080508e4e84651200563ba99
- MD5 28baab6b865fb8ee1823fe9f554774b8
- SHA1 541d39050f4b65e09d0ff339f62c561e22b9cf6d
- SHA512 02d7947ede9e81511363a6120828183dbdfc37c5a12fc10cc6b5a90384ad9436810bcfbe8341082ca4dc127bea2d028a48a482cb843936f6610caecd49b5c2a0
- SSDEEP 393216:cRmRQMH65WXzgNGB5ZQH+HEOz3cYFiVTVj9ZvQlhjmnLtfaDGn:42QMacbKxObchTbJQlcZ
- TLSH T1F2A9CE02B7E80066F1B7563099B79A16EB36BC611B31C3DF1294A26D2E737C09E35727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger