Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 00:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_e61668f7bf0c3c955610def96d7e8510_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_e61668f7bf0c3c955610def96d7e8510_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
Payload did not run: image=C:\Users\Admin\AppData\Local\Temp\2026-08-07_e61668f7bf0c3c955610def96d7e8510_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-07_e61668f7bf0c3c955610def96d7e8510_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
- Target 2026-08-07_e61668f7bf0c3c955610def96d7e8510_amadey_cobalt-strike_coinminer_darkgate_elex_hijackloade.exe
- Size 4.6MB
- Sample260808-att4ssyzet
- SHA256 844c01e8ece5af968cf714875850983095a4a952c9608ed4de6bb17bf665352e
- MD5 e61668f7bf0c3c955610def96d7e8510
- SHA1 b372bdc350eaf1b14a1cfa7cfab736f73c48ad7e
- SHA512 95e2c436c53b2f761b1d5c9bf745bf06adaf7dbbaf35371cb98fd45d46a58e2a3216ba5f50aad2bf9ddf659dfd96c15be89b95464dd315edb8ce37d85d173800
- SSDEEP 49152:T2aDHXAWSytLoqUCInTUCIabjKoh9WEbtL2tLlZqhaK6zbfqdlIhKPgssSt2gTBR:+stsF7IabjKoh9WyV2Vlx/hv7St0Ogrc
- TLSH T1BB268D216BE48535E0BB95B1A9B68356D9727C604F7187CF63807B3D2F32AD05A72323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10