General
- Target 2026-07-20_198dc5c0b33658ecc24ad609bc758afd_cobalt-strike_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_stop_tofsee_vidar
- Size 16.1MB
- Sample260720-zhgrrsgt2t
- SHA256 8285d98e70de4e1fe6a77a8a61ff499ad867e9442aa85e0b4de778b9690fb3e4
- MD5 198dc5c0b33658ecc24ad609bc758afd
- SHA1 06c65437116cac7f63ab6dbbe9d88f9daa542b5f
- SHA512 ddcbd92c4b1685fc691ccb7ba2597484d0de81e06c6f71a1259770219dc5219cb89e2b1df83e29535e8f315c47b32ff248cfae547f5f8a616f3171ee77238ca9
- SSDEEP 393216:BEZl05YflfxgkTVfdBL/tEJ1+lFj99e2xXX+QU9DrFkpBg:SZl05Yt+kTVTL/xlFVaP1
- TLSH T11B079D23A60140B1C1822179CC3AEEBD617DBE25873415CB53947D17AA72BC3AA3DB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_198dc5c0b33658ecc24ad609bc758afd_cobalt-strike_coinminer_darkgate_elex_glassworm_luca-ste.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_198dc5c0b33658ecc24ad609bc758afd_cobalt-strike_coinminer_darkgate_elex_glassworm_luca-ste.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_198dc5c0b33658ecc24ad609bc758afd_cobalt-strike_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_stop_tofsee_vidar
- Size 16.1MB
- SHA256 8285d98e70de4e1fe6a77a8a61ff499ad867e9442aa85e0b4de778b9690fb3e4
- MD5 198dc5c0b33658ecc24ad609bc758afd
- SHA1 06c65437116cac7f63ab6dbbe9d88f9daa542b5f
- SHA512 ddcbd92c4b1685fc691ccb7ba2597484d0de81e06c6f71a1259770219dc5219cb89e2b1df83e29535e8f315c47b32ff248cfae547f5f8a616f3171ee77238ca9
- SSDEEP 393216:BEZl05YflfxgkTVfdBL/tEJ1+lFj99e2xXX+QU9DrFkpBg:SZl05Yt+kTVTL/xlFVaP1
- TLSH T11B079D23A60140B1C1822179CC3AEEBD617DBE25873415CB53947D17AA72BC3AA3DB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory