General
- Target 2026-08-09_7c9ec33471531bf5664c3e4eed1631d5_amadey_cobalt-strike_coinminer_darkgate_elex_gcleaner_glassworm_icedid_luca-stealer_lynx_njrat_revil_silence_skypams_sliver_smoke-loader_vidar
- Size 46.3MB
- Sample260809-t1cymsaj5t
- SHA256 bfef4f0c80e00a8175d57aadd7859dbf7fe5f1567b98b654a088b626cb84edd9
- MD5 7c9ec33471531bf5664c3e4eed1631d5
- SHA1 ae0c89df6e74d18bf867ab84e0d9c99ba021d756
- SHA512 1c02fcf058971e9ddad64de67e41daed2af12165378ae8bcef13f990184cfbe8f75bb765141bc646071f6d9b4d03bc7a644228998203c30f394ee0d103a90275
- SSDEEP 786432:R/xNxTCeJE0FtDuNCSzOVoMMKQ03Guoa9iC5qwCUuu+qoQreno:R/xNNJEKDZSzOVoMXQ03GPa995qwCUmS
- TLSH T1E7B78C01BD8C8029E6A6097102B646A5EA37FE007738A5CF62C4797FDA727F0793571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_7c9ec33471531bf5664c3e4eed1631d5_amadey_cobalt-strike_coinminer_darkgate_elex_gcleaner_gl.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_7c9ec33471531bf5664c3e4eed1631d5_amadey_cobalt-strike_coinminer_darkgate_elex_gcleaner_gl.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_7c9ec33471531bf5664c3e4eed1631d5_amadey_cobalt-strike_coinminer_darkgate_elex_gcleaner_glassworm_icedid_luca-stealer_lynx_njrat_revil_silence_skypams_sliver_smoke-loader_vidar
- Size 46.3MB
- SHA256 bfef4f0c80e00a8175d57aadd7859dbf7fe5f1567b98b654a088b626cb84edd9
- MD5 7c9ec33471531bf5664c3e4eed1631d5
- SHA1 ae0c89df6e74d18bf867ab84e0d9c99ba021d756
- SHA512 1c02fcf058971e9ddad64de67e41daed2af12165378ae8bcef13f990184cfbe8f75bb765141bc646071f6d9b4d03bc7a644228998203c30f394ee0d103a90275
- SSDEEP 786432:R/xNxTCeJE0FtDuNCSzOVoMMKQ03Guoa9iC5qwCUuu+qoQreno:R/xNNJEKDZSzOVoMXQ03GPa995qwCUmS
- TLSH T1E7B78C01BD8C8029E6A6097102B646A5EA37FE007738A5CF62C4797FDA727F0793571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.