1e6666c0532bcf3759e48db2ae2eef63a73df54157d96fe4bc078a1e2fd5725a

Analysis

max time kernel
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/09/2026, 17:41

Target
2026-09-22_bddc54c558efde02f55bd39e63e536a1_cobalt-strike_darkgate_magniber_rhadamanthys_satacom.exe
Size 3.6MB
Sample260922-v9nbeaxtf1
SHA256 1e6666c0532bcf3759e48db2ae2eef63a73df54157d96fe4bc078a1e2fd5725a
MD5 bddc54c558efde02f55bd39e63e536a1
SHA1 0c9ffea980de7ad613315b1c89750bc54f31213e
SHA512 f4ca935dd9005961ceb40d01ccb7039dd61f85b84e695212b4376415853a753429ced293bff76e0c7bfa0ea5dbdd24732dc4e388e3f883b1ac7e67d17ab595f4
SSDEEP 49152:sHhKGSiGcePBYrTpBjmpsAmkgXUVKQpgo1kjJavJuufy2:T6hePBYrtBjmOAVlpn6gzq2
TLSH
T1E6066C51F451A929F0473E3BC5AFBB2194E67D650CB0471EEB183F1D2A322E1163A39B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: RenamesItself 1 IoCs

pid	Process
1592	2026-09-22_bddc54c558efde02f55bd39e63e536a1_cobalt-strike_darkgate_magniber_rhadamanthys_satacom.exe

C:\Users\Admin\AppData\Local\Temp\2026-09-22_bddc54c558efde02f55bd39e63e536a1_cobalt-strike_darkgate_magniber_rhadamanthys_satacom.exe
"C:\Users\Admin\AppData\Local\Temp\2026-09-22_bddc54c558efde02f55bd39e63e536a1_cobalt-strike_darkgate_magniber_rhadamanthys_satacom.exe"
1⤵
- Suspicious behavior: RenamesItself
PID:1592