General
- Target 2026-04-15_29e045f47abca13e39cb029b9c2132ac_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_rhadamanthys_smoke-loader_vidar_wannacry
- Size 7.2MB
- Sample260415-3jf4eaet6t
- SHA256 0bc26898073f347c696e2c6a5d49ce3d05e48ac696ddad50b29c42e0b6980fc1
- MD5 29e045f47abca13e39cb029b9c2132ac
- SHA1 d09bd56214798508cc78bc9a9f18d2fee4181677
- SHA512 a3e255a2d3ff69e1fb33fa0a928bf661edd14c31191fd0466c296464f094f21e6b2dd5a5feedf80c5d37dbe1bd8d58936e3bd407a9f244ca8e7fa5a5e0ec6d17
- SSDEEP 98304:lhpBv4Yan8Oyk+Xws+wE9XD8VBDdJUyL6HtItjkgcfFcNFcEuwLNe9ajRpoGWjoF:Tpdyn8OyJgV9z8bdK66HtIto0AloF
- TLSH T1D4767BA472B3397CC30B5878406DDE73BD2428642B515E7BA1C8DAB02D0697C696FF72
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-15_29e045f47abca13e39cb029b9c2132ac_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_29e045f47abca13e39cb029b9c2132ac_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_rhadamanthys_smoke-loader_vidar_wannacry
- Size 7.2MB
- SHA256 0bc26898073f347c696e2c6a5d49ce3d05e48ac696ddad50b29c42e0b6980fc1
- MD5 29e045f47abca13e39cb029b9c2132ac
- SHA1 d09bd56214798508cc78bc9a9f18d2fee4181677
- SHA512 a3e255a2d3ff69e1fb33fa0a928bf661edd14c31191fd0466c296464f094f21e6b2dd5a5feedf80c5d37dbe1bd8d58936e3bd407a9f244ca8e7fa5a5e0ec6d17
- SSDEEP 98304:lhpBv4Yan8Oyk+Xws+wE9XD8VBDdJUyL6HtItjkgcfFcNFcEuwLNe9ajRpoGWjoF:Tpdyn8OyJgV9z8bdK66HtIto0AloF
- TLSH T1D4767BA472B3397CC30B5878406DDE73BD2428642B515E7BA1C8DAB02D0697C696FF72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory