General
- Target 2026-08-21_a4170774017ff6b3e48e9afc7491e2aa_akira_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_hijackloader_luca-stealer_njrat_remcos_rhadamanthys_vidar
- Size 4.8MB
- Sample260822-kvk8dsfq7y
- SHA256 aec0ac4638d9add51e1971c07abcf76c70f48c3dad90a3e880f7af4a20a6dc16
- MD5 a4170774017ff6b3e48e9afc7491e2aa
- SHA1 a670fb97e97de66d191c3a47bad4eff4bb97c10e
- SHA512 4b22c55ba94ffdc3904021c9f74926777fd0ebf1ebff75cbe391b5bd025be1447479f2e03dec21690868982e0166a85b79cc32a514028461fa0cb01de41f77ae
- SSDEEP 49152:IxgGhqFTTRRaYSDA+ouZ/K0tDmNhJXLkZMbXsPNIULkmp1/j6AeXZG7wmpvGF1Iz:vPRRUZ/K0tKNhJX3bXsPN5kiQaZ5D
- TLSH T15036E42266D4CFE0D06F9070DE6675F69027BC248F655FCB2E807E1A3531AD1AA35A0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-21_a4170774017ff6b3e48e9afc7491e2aa_akira_amadey_cloudeye_cobalt-strike_coinminer_darkgate_e.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_a4170774017ff6b3e48e9afc7491e2aa_akira_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_hijackloader_luca-stealer_njrat_remcos_rhadamanthys_vidar
- Size 4.8MB
- SHA256 aec0ac4638d9add51e1971c07abcf76c70f48c3dad90a3e880f7af4a20a6dc16
- MD5 a4170774017ff6b3e48e9afc7491e2aa
- SHA1 a670fb97e97de66d191c3a47bad4eff4bb97c10e
- SHA512 4b22c55ba94ffdc3904021c9f74926777fd0ebf1ebff75cbe391b5bd025be1447479f2e03dec21690868982e0166a85b79cc32a514028461fa0cb01de41f77ae
- SSDEEP 49152:IxgGhqFTTRRaYSDA+ouZ/K0tDmNhJXLkZMbXsPNIULkmp1/j6AeXZG7wmpvGF1Iz:vPRRUZ/K0tKNhJX3bXsPN5kiQaZ5D
- TLSH T15036E42266D4CFE0D06F9070DE6675F69027BC248F655FCB2E807E1A3531AD1AA35A0F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Shodi worm
-
Executes dropped EXE
-
Drops file in System32 directory