General
- Target 2026-04-19_0b62ee83ad70b25ad2057566842f5ad5_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_stop_vidar_wannacry
- Size 7.7MB
- Sample260419-2aecsaaz2r
- SHA256 210577c43c7b72efbae0c02088d22a2db1a047b9131732e1ebf72b45994ba45f
- MD5 0b62ee83ad70b25ad2057566842f5ad5
- SHA1 bd885c4b961278488edb23ba0229f4e70fac1126
- SHA512 d088e7e704ce458e50a70d51fb1b305855ae3f4212b1cf7d119f4b3143d8e6a99e934a26d002bc89d48275f20b19a68ce4806583c88416f142b3036ba376bd78
- SSDEEP 98304:A/j9TIc8Nx9I/j9TIc8Nx90A91pH2WpjHrgBFFu416AWvc:A/jCTI/jCT0mHpn6F44IAWvc
- TLSH T1F1867CA161A720FDE1AED17A893AC731EA717C130231934F13BCD5562F636586E2A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-19_0b62ee83ad70b25ad2057566842f5ad5_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-19_0b62ee83ad70b25ad2057566842f5ad5_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_0b62ee83ad70b25ad2057566842f5ad5_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_satacom_stop_vidar_wannacry
- Size 7.7MB
- SHA256 210577c43c7b72efbae0c02088d22a2db1a047b9131732e1ebf72b45994ba45f
- MD5 0b62ee83ad70b25ad2057566842f5ad5
- SHA1 bd885c4b961278488edb23ba0229f4e70fac1126
- SHA512 d088e7e704ce458e50a70d51fb1b305855ae3f4212b1cf7d119f4b3143d8e6a99e934a26d002bc89d48275f20b19a68ce4806583c88416f142b3036ba376bd78
- SSDEEP 98304:A/j9TIc8Nx9I/j9TIc8Nx90A91pH2WpjHrgBFFu416AWvc:A/jCTI/jCT0mHpn6F44IAWvc
- TLSH T1F1867CA161A720FDE1AED17A893AC731EA717C130231934F13BCD5562F636586E2A733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.