General
- Target 2026-04-19_ffa3c0099df3a8ca56fd882f75602b31_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 7.3MB
- Sample260419-batjlaaz5r
- SHA256 5931c88115886280da2744fa959b2c741788867e284ba56615f33aecb8ebc3b8
- MD5 ffa3c0099df3a8ca56fd882f75602b31
- SHA1 581174a31ad21e4c4489232e2a01dde1e7b09ebc
- SHA512 c1ea711130f74633cd8d66ba286d91aa2aeea052b1779f71f351e17a85e8228272159dad4c49981d792fa21aea15462ea59626f2c292a3ab4d4e5e47eed6def0
- SSDEEP 98304:lhpBinjOykGcPdOR5fd0oAaldmdmnphdBRQjop:TpAnjOyAdOrfyKmd0jdB4op
- TLSH T1CB768D02B29442B6D0A3D175CA969721DB713C690BF1D2EF3284B6D93E337D17A3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-19_ffa3c0099df3a8ca56fd882f75602b31_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_ffa3c0099df3a8ca56fd882f75602b31_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 7.3MB
- SHA256 5931c88115886280da2744fa959b2c741788867e284ba56615f33aecb8ebc3b8
- MD5 ffa3c0099df3a8ca56fd882f75602b31
- SHA1 581174a31ad21e4c4489232e2a01dde1e7b09ebc
- SHA512 c1ea711130f74633cd8d66ba286d91aa2aeea052b1779f71f351e17a85e8228272159dad4c49981d792fa21aea15462ea59626f2c292a3ab4d4e5e47eed6def0
- SSDEEP 98304:lhpBinjOykGcPdOR5fd0oAaldmdmnphdBRQjop:TpAnjOyAdOrfyKmd0jdB4op
- TLSH T1CB768D02B29442B6D0A3D175CA969721DB713C690BF1D2EF3284B6D93E337D17A3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Drops file in System32 directory