General
- Target 2026-09-06_a8008eb4a66e4f9317db02c23738c23d_amadey_cobalt-strike_coinminer_cryptbot_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_vidar
- Size 43.8MB
- Sample260906-zmr4assepc
- SHA256 fe9536f251411b055d8b61ab2450ca55954d3e7c4f75bb489ef6a84a68aca6d0
- MD5 a8008eb4a66e4f9317db02c23738c23d
- SHA1 79a1bf132887cc0fce50bbb02c7ac59a966f2742
- SHA512 bb109318a4dd5ffb8bdc2b7a6a935ebf5faf3345e32dcee50f93e65b8595c68989a507d92e8d2c097ac4494f608780dee184ca84ac76c4ddcff44f1b69991656
- SSDEEP 393216:0mHN6+JrvPUmHN6+JrvPUmHN6+JrvPUmHN6+JrvPkC:FbrlbrlbrlbrkC
- TLSH T1D7A77B5A62EB20F9D46FD075C5A68332E2707C23073157DB527CCA3A2F676906D39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_a8008eb4a66e4f9317db02c23738c23d_amadey_cobalt-strike_coinminer_cryptbot_darkgate_elex_gl.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_a8008eb4a66e4f9317db02c23738c23d_amadey_cobalt-strike_coinminer_cryptbot_darkgate_elex_gl.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_a8008eb4a66e4f9317db02c23738c23d_amadey_cobalt-strike_coinminer_cryptbot_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_poet-rat_vidar
- Size 43.8MB
- SHA256 fe9536f251411b055d8b61ab2450ca55954d3e7c4f75bb489ef6a84a68aca6d0
- MD5 a8008eb4a66e4f9317db02c23738c23d
- SHA1 79a1bf132887cc0fce50bbb02c7ac59a966f2742
- SHA512 bb109318a4dd5ffb8bdc2b7a6a935ebf5faf3345e32dcee50f93e65b8595c68989a507d92e8d2c097ac4494f608780dee184ca84ac76c4ddcff44f1b69991656
- SSDEEP 393216:0mHN6+JrvPUmHN6+JrvPUmHN6+JrvPUmHN6+JrvPkC:FbrlbrlbrlbrkC
- TLSH T1D7A77B5A62EB20F9D46FD075C5A68332E2707C23073157DB527CCA3A2F676906D39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1