Overview

overview

4

Static

static

3

2026-08-10...te.exe

windows10-2004-x64

4

2026-08-10...te.exe

windows11-ltsc_2024-x64

4

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/08/2026, 22:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-10_219869ca415db850795f950802458e6f_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe
  • Size 9.1MB
  • Sample260810-2s8dksbl3s
  • SHA256 0438fc01e762522e7a48d3109a7174be222c49d4178ff82817221941fa2fea6f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
discovery

Malware Config

Signatures

  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-10_219869ca415db850795f950802458e6f_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-10_219869ca415db850795f950802458e6f_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:4588

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zFM.exe
        • Path C:\Program Files\7-Zip\7zFM.exe
        • Size 10.1MB
        • SHA256 ab4fdefba6efd6f11742e9357ec4cbb3ca7b24be410b97aa3984efa370096f6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 1015B
        • SHA256 cc88dfac1ac5b5b6a8eb90363fab902b602e40f48965215135188eb309f230d2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 1KB
        • SHA256 546a0ef5a9f15c3586bb739c98acb5001d8724763b59225b71075fe1bf0a683b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 2KB
        • SHA256 31d630dddd03fb93032524055af216c26531413fbae58d912f42cd082d2c7bce
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 3KB
        • SHA256 939e103802f3de88d5cec02592565e6f5f2e32dade166a157fc664978abe7ea2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 3KB
        • SHA256 7ada0143000701d8813e8bfceab7012ad356b83f06d59ee4f72883515591db09
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 408B
        • SHA256 c95625c6df6dbfc2397665037e01b810f9c80b5107a364dc3332bc1a201c36e5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 3KB
        • SHA256 de7a96797883c45038348ea6724cc55fea88f05756c7c926ba75d0a32a7727ee
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 3KB
        • SHA256 9deb7b84799b6336b329973d32d547a713d0597478c1098b228e7d108112e619
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 3KB
        • SHA256 ab31134837a09dc90ace7fc9eab7ab6a53d80cd5b00e2c57b9b521e449879a0f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 4KB
        • SHA256 c374087c7a12d616286ff8c3faeaa5e37ed32f7bc3b3e265348e45079b27b909
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 60B
        • SHA256 668363022751a15c50d60ce343daae2897701894d4bc0043f521de54731e3146
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 559B
        • SHA256 95938d1f634468332bf01de4664de77265f4a8702c428505df5db0b172f8069e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        log.txt
        • Path C:\log.txt
        • Size 748B
        • SHA256 6348c0fd32a67393b920add3df4faf54b652e5087f185daeb9cff01e7c725694
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/4588-2085-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/4588-2086-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/4588-2346-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/4588-5159-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/4588-6157-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/4588-9953-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/4588-11304-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/4588-11307-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/4588-11310-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/4588-11453-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/4588-11537-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/4588-11660-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/4588-11661-0x0000000000400000-0x000000000040F000-memory.dmp
        Download

        memory/4588-11662-0x0000000000400000-0x000000000040F000-memory.dmp
        Download