General
- Target 2026-04-15_479e49fd40a699c47efb5f18998dd8c4_amadey_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 9.9MB
- Sample260415-2sfcssbv3r
- SHA256 144ae401133f6eca9ebde4d74b8646da598647a241606bf606b6f9599c66004a
- MD5 479e49fd40a699c47efb5f18998dd8c4
- SHA1 a0d92fc929fbcb9236cba50c85176ed9bbeba94d
- SHA512 c00147794d74fa0c20a9042fcf8b76b4546fc7e0afc6e2f588c4d471fb1834eb90ee16f9e63462cb40a4d3e084f1c66087c5446db8a77f443cd5e46ae25f8c88
- SSDEEP 98304:BllR0llRbn7OQQQllR0llRbn7OQQVA91pH2WpjHrgBFFu416AWvc://C/bnSQQe/C/bnSQQVmHpn6F44IAWvc
- TLSH T16DA67CA162E724FDE0BFD17989758731EA727C530230934F12BCD64A2F636546E2A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-15_479e49fd40a699c47efb5f18998dd8c4_amadey_cobalt-strike_coinminer_glassworm_hijackloader_ic.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_479e49fd40a699c47efb5f18998dd8c4_amadey_cobalt-strike_coinminer_glassworm_hijackloader_ic.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_479e49fd40a699c47efb5f18998dd8c4_amadey_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 9.9MB
- SHA256 144ae401133f6eca9ebde4d74b8646da598647a241606bf606b6f9599c66004a
- MD5 479e49fd40a699c47efb5f18998dd8c4
- SHA1 a0d92fc929fbcb9236cba50c85176ed9bbeba94d
- SHA512 c00147794d74fa0c20a9042fcf8b76b4546fc7e0afc6e2f588c4d471fb1834eb90ee16f9e63462cb40a4d3e084f1c66087c5446db8a77f443cd5e46ae25f8c88
- SSDEEP 98304:BllR0llRbn7OQQQllR0llRbn7OQQVA91pH2WpjHrgBFFu416AWvc://C/bnSQQe/C/bnSQQVmHpn6F44IAWvc
- TLSH T16DA67CA162E724FDE0BFD17989758731EA727C530230934F12BCD64A2F636546E2A723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.