General
- Target 2026-04-20_0112fd8991baa8b782465a2e9d6f1873_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 7.8MB
- Sample260420-e55rwsg12j
- SHA256 bfbcae9b6ac9248b5dc4d4867d92e63a02f6a36a6ebd9120f0022d1a3a07050a
- MD5 0112fd8991baa8b782465a2e9d6f1873
- SHA1 94eda9a055e1b8c81f762626950e98974a5eb62f
- SHA512 2f07cf409f9a9328bef51cd579e1b7aa1ee981eab60002926ceb5ebbb47f2d1332ec37e575059f06c2ddd41d6b2591c73ea02ed2487792351f9a0bc4b3641af5
- SSDEEP 98304:ShpBinjOykGcIBdAWQtZ/K0tGOFWVRuQHD5fkZcp:WpAnjOynBdAWyZ/K0ttYVAQHhPp
- TLSH T197868D16F2A44376D0B3D0B9C6DAA756EA3234551B30D6CF2384B7692E33BD1863A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-20_0112fd8991baa8b782465a2e9d6f1873_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_0112fd8991baa8b782465a2e9d6f1873_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 7.8MB
- SHA256 bfbcae9b6ac9248b5dc4d4867d92e63a02f6a36a6ebd9120f0022d1a3a07050a
- MD5 0112fd8991baa8b782465a2e9d6f1873
- SHA1 94eda9a055e1b8c81f762626950e98974a5eb62f
- SHA512 2f07cf409f9a9328bef51cd579e1b7aa1ee981eab60002926ceb5ebbb47f2d1332ec37e575059f06c2ddd41d6b2591c73ea02ed2487792351f9a0bc4b3641af5
- SSDEEP 98304:ShpBinjOykGcIBdAWQtZ/K0tGOFWVRuQHD5fkZcp:WpAnjOynBdAWyZ/K0ttYVAQHhPp
- TLSH T197868D16F2A44376D0B3D0B9C6DAA756EA3234551B30D6CF2384B7692E33BD1863A731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory