General
- Target 2026-04-15_a580cb0b0e61b0611827cc7fb9f58505_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 10.8MB
- Sample260415-286vpad15v
- SHA256 0dc54128f3af227d190d1cea968779347d3ba6a4cdda6a9445a8a7121e9e647f
- MD5 a580cb0b0e61b0611827cc7fb9f58505
- SHA1 817c4cffcddcccf68cfc40459b4f3b2bdbf9f299
- SHA512 87837477cc42148e5795e20f0db9f515599f198865a634250f6a293661749c2c8f713497244a9f810cbc85998295753fec50e982d2fa547cab9721559ef37716
- SSDEEP 196608:8pAnjOyAdOrf26g2S9+ULdNPtbuPZOOmnqogHh/P:OAntg2SlLdNPt6ROOmqZd
- TLSH T1A1B6CE1EF7904136D0A39176C4A99721DA71F4689730C7DB2388B71DAF327C3AA36762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-15_a580cb0b0e61b0611827cc7fb9f58505_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_a580cb0b0e61b0611827cc7fb9f58505_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_a580cb0b0e61b0611827cc7fb9f58505_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 10.8MB
- SHA256 0dc54128f3af227d190d1cea968779347d3ba6a4cdda6a9445a8a7121e9e647f
- MD5 a580cb0b0e61b0611827cc7fb9f58505
- SHA1 817c4cffcddcccf68cfc40459b4f3b2bdbf9f299
- SHA512 87837477cc42148e5795e20f0db9f515599f198865a634250f6a293661749c2c8f713497244a9f810cbc85998295753fec50e982d2fa547cab9721559ef37716
- SSDEEP 196608:8pAnjOyAdOrf26g2S9+ULdNPtbuPZOOmnqogHh/P:OAntg2SlLdNPt6ROOmqZd
- TLSH T1A1B6CE1EF7904136D0A39176C4A99721DA71F4689730C7DB2388B71DAF327C3AA36762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory