General
- Target 2026-04-20_55cd1947c284f3434f8379c999071501_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 7.0MB
- Sample260420-bft3baaz7x
- SHA256 2f428f8afd9551286a8d62e2e0da3872aa88ed6c231109d96518d688176cbeb2
- MD5 55cd1947c284f3434f8379c999071501
- SHA1 858e1c2eca6c75ed04f9c9688ffb6d8d2ba21e69
- SHA512 aa8d96a69097cb4002e7d2d34432dfb340c2b112d0e2d520eaa95d4f74be47880137efe71955a526f82845c66cdb04d91b864a425273ca0158cba57d71128865
- SSDEEP 98304:ShpBinjOykGcIBdAWQtZ/K0tGOFWVRuQHDS:WpAnjOynBdAWyZ/K0ttYVAQHG
- TLSH T1EA769E13F2944276D0B3D079C69AA726EA7138651B30E2DF2384B7592E33BD1973A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-20_55cd1947c284f3434f8379c999071501_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_55cd1947c284f3434f8379c999071501_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 7.0MB
- SHA256 2f428f8afd9551286a8d62e2e0da3872aa88ed6c231109d96518d688176cbeb2
- MD5 55cd1947c284f3434f8379c999071501
- SHA1 858e1c2eca6c75ed04f9c9688ffb6d8d2ba21e69
- SHA512 aa8d96a69097cb4002e7d2d34432dfb340c2b112d0e2d520eaa95d4f74be47880137efe71955a526f82845c66cdb04d91b864a425273ca0158cba57d71128865
- SSDEEP 98304:ShpBinjOykGcIBdAWQtZ/K0tGOFWVRuQHDS:WpAnjOynBdAWyZ/K0ttYVAQHG
- TLSH T1EA769E13F2944276D0B3D079C69AA726EA7138651B30E2DF2384B7592E33BD1973A731
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Drops file in System32 directory