General
- Target 2026-08-07_bef0b846a7356df8bb812fcc07cf646b_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_luca-stealer_njrat_wannacry
- Size 930KB
- Sample260807-st2sraybkh
- SHA256 020c68285659079b91ec164248a436ab762ec0852bbaf2ccab96fdcf208968a8
- MD5 bef0b846a7356df8bb812fcc07cf646b
- SHA1 7b2ed1c087395df182ff3905a64158295b591aae
- SHA512 405a2020e17254a979b2469285b90f5703c4c287a7aa7442e5c711f579435f41d00f69f7a4b9353983307022119dfcf9be4f9e3f960eb98d4fb29725c5fac9e5
- SSDEEP 12288:/7+5uVq4ZOhSv1TaejTq8DlXesYe2KiRLCtnmTaF5EyP6GZNsIWWdZSQMQPP3S6x:/744Zqu1TaATdHocmGFaGvZSQMQ3S6j9
- TLSH T17E156D607666D333D46180B24E78BFA6D06DBD294F7146CF63C82B3E95391D22E31E26
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_bef0b846a7356df8bb812fcc07cf646b_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_bef0b846a7356df8bb812fcc07cf646b_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloader_luca-stealer_njrat_wannacry
- Size 930KB
- SHA256 020c68285659079b91ec164248a436ab762ec0852bbaf2ccab96fdcf208968a8
- MD5 bef0b846a7356df8bb812fcc07cf646b
- SHA1 7b2ed1c087395df182ff3905a64158295b591aae
- SHA512 405a2020e17254a979b2469285b90f5703c4c287a7aa7442e5c711f579435f41d00f69f7a4b9353983307022119dfcf9be4f9e3f960eb98d4fb29725c5fac9e5
- SSDEEP 12288:/7+5uVq4ZOhSv1TaejTq8DlXesYe2KiRLCtnmTaF5EyP6GZNsIWWdZSQMQPP3S6x:/744Zqu1TaATdHocmGFaGvZSQMQ3S6j9
- TLSH T17E156D607666D333D46180B24E78BFA6D06DBD294F7146CF63C82B3E95391D22E31E26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.