General
- Target 2026-08-01_f416667b792441c53911ca89643f1b25_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_rhadamanthys_stop_vidar_wannacry
- Size 6.2MB
- Sample260801-pl2k8svena
- SHA256 301a1bf9496f2a6a2a21226d01ba10ec1b8b8622f84c6b80c0b293b01ab5abcf
- MD5 f416667b792441c53911ca89643f1b25
- SHA1 1188028a0f0566a8b12edd1fc03d459f11a3e45b
- SHA512 6a15acde957d335cb228495b23136c1865a706c82aed66825166172170704e30ac1ea8216b368b09d95c2bf1be184db98006511f6845a71ab8160ce8560e3b62
- SSDEEP 49152:/DHXJOpL1M84pvoJdXN0BMOwLloBrugYy6i1zuajsauZnJrOIAOjReW4SkZP4szX:wpGfQJdXN0B7+sit7HhfkZcIt7Ojo
- TLSH T13C666D2AB2B88276D073D179C5A69759E9317C211B3186CF2284AB7C3F336D1D93A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_f416667b792441c53911ca89643f1b25_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_gl.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_f416667b792441c53911ca89643f1b25_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_gl.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_f416667b792441c53911ca89643f1b25_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_rhadamanthys_stop_vidar_wannacry
- Size 6.2MB
- SHA256 301a1bf9496f2a6a2a21226d01ba10ec1b8b8622f84c6b80c0b293b01ab5abcf
- MD5 f416667b792441c53911ca89643f1b25
- SHA1 1188028a0f0566a8b12edd1fc03d459f11a3e45b
- SHA512 6a15acde957d335cb228495b23136c1865a706c82aed66825166172170704e30ac1ea8216b368b09d95c2bf1be184db98006511f6845a71ab8160ce8560e3b62
- SSDEEP 49152:/DHXJOpL1M84pvoJdXN0BMOwLloBrugYy6i1zuajsauZnJrOIAOjReW4SkZP4szX:wpGfQJdXN0B7+sit7HhfkZcIt7Ojo
- TLSH T13C666D2AB2B88276D073D179C5A69759E9317C211B3186CF2284AB7C3F336D1D93A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory