Overview

overview

4

Static

static

3

2026-08-10...te.exe

windows10-2004-x64

4

2026-08-10...te.exe

windows11-ltsc_2024-x64

4

Analysis

  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/08/2026, 22:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-10_219869ca415db850795f950802458e6f_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe
  • Size 9.1MB
  • Sample260810-2s8dksbl3s
  • SHA256 0438fc01e762522e7a48d3109a7174be222c49d4178ff82817221941fa2fea6f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
discovery

Malware Config

Signatures

  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-10_219869ca415db850795f950802458e6f_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-10_219869ca415db850795f950802458e6f_amadey_cobalt-strike_darkgate_elex_hijackloader_luca-ste.exe"
    1⤵
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    PID:3804
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:5168

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          appvcleaner.exe
          • Path C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
          • Size 11.2MB
          • SHA256 ded74b3e2f9fb8ec1d1f6c4b886c9a6c0903129e661305e098fe1e7257308153
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          log.txt
          • Path C:\log.txt
          • Size 1KB
          • SHA256 77230b6752ef1ab3c9a52480e0370ee55802bd218e14d7f2e88e58a67c2018cd
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          log.txt
          • Path C:\log.txt
          • Size 2KB
          • SHA256 cf8b43dca5886bbdb64acf6240b4f7e8f8e5efe39e83487291f387eae34f628d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          log.txt
          • Path C:\log.txt
          • Size 3KB
          • SHA256 1849c6afe22f6e0408c9981a50e415d6567a8c629942c9d1c6ee6e288622068b
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          log.txt
          • Path C:\log.txt
          • Size 3KB
          • SHA256 03fc91bca64905167c222f843c7a90b5d38f93d1b0235bda862e605ce2c61bfa
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          log.txt
          • Path C:\log.txt
          • Size 3KB
          • SHA256 a82028a4e9a07ca84f303cae609893aa1c228c1a578c2e2b38be9f01cb8184c2
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          log.txt
          • Path C:\log.txt
          • Size 4KB
          • SHA256 c083c92336b301ef3ab1c54beaa365ea9bfa5bddccacfa4cfcc01f1a47986cff
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          log.txt
          • Path C:\log.txt
          • Size 294B
          • SHA256 c8181030dc74995a2afcd057687ff9724b75e091ecd44d51d9910cbf63e7eff0
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          log.txt
          • Path C:\log.txt
          • Size 748B
          • SHA256 6348c0fd32a67393b920add3df4faf54b652e5087f185daeb9cff01e7c725694
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          log.txt
          • Path C:\log.txt
          • Size 60B
          • SHA256 668363022751a15c50d60ce343daae2897701894d4bc0043f521de54731e3146
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          log.txt
          • Path C:\log.txt
          • Size 947B
          • SHA256 ff436d7943740eacdf7c4b8fedc8a1411b3d4fd6854ea715ad11e4da3df08465
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          memory/3804-3311-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/3804-3318-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/3804-3312-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/3804-3313-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/3804-3314-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/3804-3315-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/3804-3316-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/3804-2027-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/3804-3319-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/3804-3320-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/3804-3321-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/3804-3322-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/3804-3323-0x0000000000400000-0x000000000040F000-memory.dmp
          Download

          memory/3804-3324-0x0000000000400000-0x000000000040F000-memory.dmp
          Download