345cf6ee45ab45b6f4089426654caa60e77de7b39868c8502d50916faccc0e56

Analysis

max time kernel
148s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/11/2026, 17:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-11-02_f88c5c1718a4b8653c0f1f1d19c2f608_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_gl.exe
Size 4.3MB
Sample261102-wdj5jsby4x
SHA256 345cf6ee45ab45b6f4089426654caa60e77de7b39868c8502d50916faccc0e56
MD5 f88c5c1718a4b8653c0f1f1d19c2f608
SHA1 6155d423db3462e71dbfab522e2182b1f03e56e4
SHA512 6ff9438a59b1eb3d1a2e97b01c285765d96802eaceb3a7867b6eb6a1cde3bb11a26a85b11b7035f1cbf511d61ff9b57bdd02e2d6cb7f66775ceeffc04e68c2fa
SSDEEP 49152:gOpL1M84pvoJdXN0BMOwLloBrugYy6i1zuajsauZnJkY5GhRBhTnorGbNC5W:9pGfQJdXN0B7+sitx5GT3zw5W
TLSH
T18A263A1967E405B5E17785348961825DE9727C20CB338FCF22509EADBFB2AD09D39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-11-02_f88c5c1718a4b8653c0f1f1d19c2f608_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_gl.exe

C:\Users\Admin\AppData\Local\Temp\2026-11-02_f88c5c1718a4b8653c0f1f1d19c2f608_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_gl.exe
"C:\Users\Admin\AppData\Local\Temp\2026-11-02_f88c5c1718a4b8653c0f1f1d19c2f608_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_gl.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:3900

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads