General
- Target 2026-04-17_776f5ad04a657b9e1646a6e6c59e9b23_amadey_cobalt-strike_coinminer_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 8.0MB
- Sample260417-eegmdaew7q
- SHA256 18cac5f574bdecdb4954abe3c7e322d7fad56a3fac3e43b725c6ca133b7357a7
- MD5 776f5ad04a657b9e1646a6e6c59e9b23
- SHA1 e597d96f5b04532b288f46f22214da2b1a935996
- SHA512 0e3edbd0f31fcdf4a67f4bad669f8192220724f19fee9bdd0154ed4b9ee6b06e276cc489b674fbe88340088f3a6b2681381d7a2b366d4df55d06539406d9be2a
- SSDEEP 196608://C/bnSQA/C/bnSQKe/C/bnSQA/C/bnSQKK://C/bnA/C/bn//C/bnA/C/bnn
- TLSH T1E6869D2137F84C66E1F765358AB199018E76BDA60734D2CF23A4469E1E33BC09E36B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-17_776f5ad04a657b9e1646a6e6c59e9b23_amadey_cobalt-strike_coinminer_hijackloader_icedid_luca-.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_776f5ad04a657b9e1646a6e6c59e9b23_amadey_cobalt-strike_coinminer_hijackloader_icedid_luca-.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_776f5ad04a657b9e1646a6e6c59e9b23_amadey_cobalt-strike_coinminer_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 8.0MB
- SHA256 18cac5f574bdecdb4954abe3c7e322d7fad56a3fac3e43b725c6ca133b7357a7
- MD5 776f5ad04a657b9e1646a6e6c59e9b23
- SHA1 e597d96f5b04532b288f46f22214da2b1a935996
- SHA512 0e3edbd0f31fcdf4a67f4bad669f8192220724f19fee9bdd0154ed4b9ee6b06e276cc489b674fbe88340088f3a6b2681381d7a2b366d4df55d06539406d9be2a
- SSDEEP 196608://C/bnSQA/C/bnSQKe/C/bnSQA/C/bnSQKK://C/bnA/C/bn//C/bnA/C/bnn
- TLSH T1E6869D2137F84C66E1F765358AB199018E76BDA60734D2CF23A4469E1E33BC09E36B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.