General
- Target 2026-07-28_6385da15e01668a75f8d20ad154f44f0_cobalt-strike_coinminer_darkgate_elex_glassworm_memery_rhadamanthys_stop_tofsee_wannacry
- Size 11.8MB
- Sample260728-2t8ezabl9v
- SHA256 36756ff62258240d9c23dce5ccca431aa7fe78735d27ade5009cb248c71aca20
- MD5 6385da15e01668a75f8d20ad154f44f0
- SHA1 434dd446e23e6e0d4642a748b201ba32128b101a
- SHA512 e411ffd1f1f030bf60ddc1233902afc22b6fc10f28b2e7e4d841f6ba8547f12fbaed33fd0363f6a529d29b4294d99855e3713856d8e810e4876873078104f516
- SSDEEP 196608:ykRub5zPMhT227p+VDtj4Z/X8SxFC/KnfzNg1mPvKQ2jptOjt6W4vkllNU0SLGcw:ykRfJhllNUHGcgUVluK7aH
- TLSH T116C6CF40F7D740B1EC67163098AEA23B4735BD02452CCB9AF90CFAD9AF336A1C964756
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-28_6385da15e01668a75f8d20ad154f44f0_cobalt-strike_coinminer_darkgate_elex_glassworm_memery_r.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_6385da15e01668a75f8d20ad154f44f0_cobalt-strike_coinminer_darkgate_elex_glassworm_memery_rhadamanthys_stop_tofsee_wannacry
- Size 11.8MB
- SHA256 36756ff62258240d9c23dce5ccca431aa7fe78735d27ade5009cb248c71aca20
- MD5 6385da15e01668a75f8d20ad154f44f0
- SHA1 434dd446e23e6e0d4642a748b201ba32128b101a
- SHA512 e411ffd1f1f030bf60ddc1233902afc22b6fc10f28b2e7e4d841f6ba8547f12fbaed33fd0363f6a529d29b4294d99855e3713856d8e810e4876873078104f516
- SSDEEP 196608:ykRub5zPMhT227p+VDtj4Z/X8SxFC/KnfzNg1mPvKQ2jptOjt6W4vkllNU0SLGcw:ykRfJhllNUHGcgUVluK7aH
- TLSH T116C6CF40F7D740B1EC67163098AEA23B4735BD02452CCB9AF90CFAD9AF336A1C964756
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory