1eddc62b0c91aafb7162f60da6335697e5ada89daa8cd3da15a600628bebe999

Analysis

max time kernel
150s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/07/2026, 11:43

Target
2026-07-23_49cb11f180d733b6a9b1a18b6ce65165_amadey_cobalt-strike_coinminer_darkgate_glassworm_smoke-loader.exe
Size 1.9MB
Sample260723-nvz84axfla
SHA256 1eddc62b0c91aafb7162f60da6335697e5ada89daa8cd3da15a600628bebe999
MD5 49cb11f180d733b6a9b1a18b6ce65165
SHA1 7cbadf7ade7cbed9216f25e58d1302d545443683
SHA512 d1dc3eca5c68b5d464e9298c0c0f10c7e56c609f7eedf56d369f97c6277259129ec83ca561143d92f67a8966642776dc62bb68a5a83921da65f37103dc8dfbe5
SSDEEP 24576:mKqY3aoyH7YomxViffSzoGX0HHdzj2YFvbKRAIM8SUnEtkUdHZZf6zCpSwxoqK9t:7h76f1FxoQ0SOyFTbTxRPJm9YMD
TLSH
T15A956A23FEC124B2DDCA9034A9B56EF34E74AB540395C2D3EF469DE40D649E1633A2D8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1196	2026-07-23_49cb11f180d733b6a9b1a18b6ce65165_amadey_cobalt-strike_coinminer_darkgate_glassworm_smoke-loader.exe
1196	2026-07-23_49cb11f180d733b6a9b1a18b6ce65165_amadey_cobalt-strike_coinminer_darkgate_glassworm_smoke-loader.exe

C:\Users\Admin\AppData\Local\Temp\2026-07-23_49cb11f180d733b6a9b1a18b6ce65165_amadey_cobalt-strike_coinminer_darkgate_glassworm_smoke-loader.exe
"C:\Users\Admin\AppData\Local\Temp\2026-07-23_49cb11f180d733b6a9b1a18b6ce65165_amadey_cobalt-strike_coinminer_darkgate_glassworm_smoke-loader.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1196