General
- Target 2026-04-16_0f3b909bf19c3be7c2d22ef6f5829259_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar_wannacry
- Size 5.1MB
- Sample260416-rezjeah14m
- SHA256 0c356cf9378dd79fc19830383470a1fbb0674bbd7d4e7a6a9d9aeb95429cc9a7
- MD5 0f3b909bf19c3be7c2d22ef6f5829259
- SHA1 035e2fcfdd561273360ed9d82be58019cb7b57f7
- SHA512 0de675ab2c564bedfc6cdc7cd0574cbd7f804c34425df122468ad50694a6ada17adbcfea3043e2b7765c647ad202288d3931269f5e39c929fea5bdc4e92dcff5
- SSDEEP 98304:IstsFfovstsFk+AM+M6RkMkIM7rnnh7DcL9IW1dXg3S/MHmg:vmFAkmFbVnh7D
- TLSH T17A3639F2A5C3A027CCAD0D7045118A70F9266FAF3E1D7547EE507A1AAB3F2C1692D316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-16_0f3b909bf19c3be7c2d22ef6f5829259_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_0f3b909bf19c3be7c2d22ef6f5829259_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_0f3b909bf19c3be7c2d22ef6f5829259_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar_wannacry
- Size 5.1MB
- SHA256 0c356cf9378dd79fc19830383470a1fbb0674bbd7d4e7a6a9d9aeb95429cc9a7
- MD5 0f3b909bf19c3be7c2d22ef6f5829259
- SHA1 035e2fcfdd561273360ed9d82be58019cb7b57f7
- SHA512 0de675ab2c564bedfc6cdc7cd0574cbd7f804c34425df122468ad50694a6ada17adbcfea3043e2b7765c647ad202288d3931269f5e39c929fea5bdc4e92dcff5
- SSDEEP 98304:IstsFfovstsFk+AM+M6RkMkIM7rnnh7DcL9IW1dXg3S/MHmg:vmFAkmFbVnh7D
- TLSH T17A3639F2A5C3A027CCAD0D7045118A70F9266FAF3E1D7547EE507A1AAB3F2C1692D316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.