General
- Target 2026-04-16_bc6aa940c89f14a5dcb4b6c58c81a03e_amadey_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 4.2MB
- Sample260416-btejsagy9w
- SHA256 fc6b3825adb2f6166cf4ea87aa4fdd2fa4c33864f248d6cf1b9d3d59684aecc9
- MD5 bc6aa940c89f14a5dcb4b6c58c81a03e
- SHA1 792e401d5a618baa5fcc796b22bda816d16624c1
- SHA512 6b7430c61476a207f834881de6b5de2588fb8f1f570d0f4c9f75058ef44a7280613515ee5632fc44e074c86c68ca2cd99bc24048cfc0e9aeb6f844bcb84efcc6
- SSDEEP 98304:BllR0llRbn7OQcFOU/jIEeQfoR/IuOFVjUu5m://C/bnSQcFFIF0wuQ
- TLSH T105168D1176E48432E1B3163159B496185A35B8A587378DCF73CC1ACEAFB1AC18E36B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-16_bc6aa940c89f14a5dcb4b6c58c81a03e_amadey_cobalt-strike_coinminer_glassworm_hijackloader_ic.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_bc6aa940c89f14a5dcb4b6c58c81a03e_amadey_cobalt-strike_coinminer_glassworm_hijackloader_ic.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_bc6aa940c89f14a5dcb4b6c58c81a03e_amadey_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 4.2MB
- SHA256 fc6b3825adb2f6166cf4ea87aa4fdd2fa4c33864f248d6cf1b9d3d59684aecc9
- MD5 bc6aa940c89f14a5dcb4b6c58c81a03e
- SHA1 792e401d5a618baa5fcc796b22bda816d16624c1
- SHA512 6b7430c61476a207f834881de6b5de2588fb8f1f570d0f4c9f75058ef44a7280613515ee5632fc44e074c86c68ca2cd99bc24048cfc0e9aeb6f844bcb84efcc6
- SSDEEP 98304:BllR0llRbn7OQcFOU/jIEeQfoR/IuOFVjUu5m://C/bnSQcFFIF0wuQ
- TLSH T105168D1176E48432E1B3163159B496185A35B8A587378DCF73CC1ACEAFB1AC18E36B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.