General
- Target 2026-08-14_2c1617ce0c212f6a963611c139714841_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 19.4MB
- Sample260815-agj33avbpc
- SHA256 1e39ed763b7e47db4b098b0f1b72d386a41525ebecb21ddfe61e1e19305ca396
- MD5 2c1617ce0c212f6a963611c139714841
- SHA1 336eb530ab758d3eb4f25114810e0da98ce13594
- SHA512 8bdda67cffce8aa73520305eeb5067b581b8ef6ea5a5ed2a1ef9f532d3eef6eb8087f01ffd5b29701705d29032d2a7f459a7f3b871f6929b06b7594cdef9424a
- SSDEEP 393216:tkikzbZl05YflfxgkTVfdBL/tEJ1+lFj99e2xXX+QU9DrFkpBK:tkik/Zl05Yt+kTVTL/xlFVaPP
- TLSH T16D27BE23A64140B1C18221788C3AEEBE617DBE15473455CF63947C2B6A72BC3AA3D75F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_2c1617ce0c212f6a963611c139714841_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_i.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_2c1617ce0c212f6a963611c139714841_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_i.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_2c1617ce0c212f6a963611c139714841_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_icedid_luca-stealer_njrat_remcos_vidar
- Size 19.4MB
- SHA256 1e39ed763b7e47db4b098b0f1b72d386a41525ebecb21ddfe61e1e19305ca396
- MD5 2c1617ce0c212f6a963611c139714841
- SHA1 336eb530ab758d3eb4f25114810e0da98ce13594
- SHA512 8bdda67cffce8aa73520305eeb5067b581b8ef6ea5a5ed2a1ef9f532d3eef6eb8087f01ffd5b29701705d29032d2a7f459a7f3b871f6929b06b7594cdef9424a
- SSDEEP 393216:tkikzbZl05YflfxgkTVfdBL/tEJ1+lFj99e2xXX+QU9DrFkpBK:tkik/Zl05Yt+kTVTL/xlFVaPP
- TLSH T16D27BE23A64140B1C18221788C3AEEBE617DBE15473455CF63947C2B6A72BC3AA3D75F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry