General
- Target 2026-04-19_43486fe69aee80be4fb5dc6381b0d0e6_amadey_cobalt-strike_coinminer_darkgate_icedid_njrat_redline-stealer_rhadamanthys_satacom_smoke-loader_stop_vidar_wannacry
- Size 4.2MB
- Sample260419-193c8aay9p
- SHA256 32fee133829a1cb1174a17fc6597dfb75de5f337e7beb78dee50aa5752a6409b
- MD5 43486fe69aee80be4fb5dc6381b0d0e6
- SHA1 f01303ba5561846496fd6be50afd7fe58ea47991
- SHA512 2d1275737a18b3378c5f238687247563f718448ecff380c1feaf60aa9db9612dbe72f41b7725ebf8c299dae882cb98072741c8847fd19de983267bc683645602
- SSDEEP 49152:c/ev6ok/ev6oRDd79WCGlY5jiw2b/ev6ok/ev6oRDd79WCGlY5jiw2EUasqcVO/t:2C+CRp7n5+C+CRp7n5fPFmAt
- TLSH T14D167C1977E85075E5B355358966C260EFB6BC211B3087CF6390AA3E1F336D0AD3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_43486fe69aee80be4fb5dc6381b0d0e6_amadey_cobalt-strike_coinminer_darkgate_icedid_njrat_red.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_43486fe69aee80be4fb5dc6381b0d0e6_amadey_cobalt-strike_coinminer_darkgate_icedid_njrat_red.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_43486fe69aee80be4fb5dc6381b0d0e6_amadey_cobalt-strike_coinminer_darkgate_icedid_njrat_redline-stealer_rhadamanthys_satacom_smoke-loader_stop_vidar_wannacry
- Size 4.2MB
- SHA256 32fee133829a1cb1174a17fc6597dfb75de5f337e7beb78dee50aa5752a6409b
- MD5 43486fe69aee80be4fb5dc6381b0d0e6
- SHA1 f01303ba5561846496fd6be50afd7fe58ea47991
- SHA512 2d1275737a18b3378c5f238687247563f718448ecff380c1feaf60aa9db9612dbe72f41b7725ebf8c299dae882cb98072741c8847fd19de983267bc683645602
- SSDEEP 49152:c/ev6ok/ev6oRDd79WCGlY5jiw2b/ev6ok/ev6oRDd79WCGlY5jiw2EUasqcVO/t:2C+CRp7n5+C+CRp7n5fPFmAt
- TLSH T14D167C1977E85075E5B355358966C260EFB6BC211B3087CF6390AA3E1F336D0AD3AB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.