General
- Target 2026-07-18_55b562c1ee32a2fc1e7529eb7a95fe9c_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_swisyn_vidar_wannacry
- Size 4.5MB
- Sample260718-bfmy1abt2r
- SHA256 391af86f1f234f7cb4a437d6722505bf0c6215489be354fb204506eabea17a1b
- MD5 55b562c1ee32a2fc1e7529eb7a95fe9c
- SHA1 0b4bafbe12c36cf102f2df52de139e936ab997fb
- SHA512 ec995f38c3efbd43c512f2a40f43a0dd58ffe3049b3815fa89210f756976937f44d6f218f762be50d3be5cdb917d153fc941d9185d5dfcc556e07612073f8c89
- SSDEEP 98304:J+i/Ku5e+iltrASBWxM3hsBCkW5eU//q1HuBgNF97nlPaHQg:Ai/t5e7t6Cd5AOBOPar
- TLSH T14F26AE217B45C075E68141F21565ABBAC17CED2507714CCB97C02E7AAA322E32F36F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-18_55b562c1ee32a2fc1e7529eb7a95fe9c_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_55b562c1ee32a2fc1e7529eb7a95fe9c_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_55b562c1ee32a2fc1e7529eb7a95fe9c_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_icedid_luca-stealer_njrat_swisyn_vidar_wannacry
- Size 4.5MB
- SHA256 391af86f1f234f7cb4a437d6722505bf0c6215489be354fb204506eabea17a1b
- MD5 55b562c1ee32a2fc1e7529eb7a95fe9c
- SHA1 0b4bafbe12c36cf102f2df52de139e936ab997fb
- SHA512 ec995f38c3efbd43c512f2a40f43a0dd58ffe3049b3815fa89210f756976937f44d6f218f762be50d3be5cdb917d153fc941d9185d5dfcc556e07612073f8c89
- SSDEEP 98304:J+i/Ku5e+iltrASBWxM3hsBCkW5eU//q1HuBgNF97nlPaHQg:Ai/t5e7t6Cd5AOBOPar
- TLSH T14F26AE217B45C075E68141F21565ABBAC17CED2507714CCB97C02E7AAA322E32F36F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory