General
- Target 2026-04-23_94f8384dd378eef38ed912158b0329e4_amadey_cobalt-strike_coinminer_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 1.9MB
- Sample260423-wp49vsc13j
- SHA256 5f5806b5e2f405d1dd98758ea493314afc072d48e175e1e88cac719471c0f60c
- MD5 94f8384dd378eef38ed912158b0329e4
- SHA1 48d453899b1c930ccb91a212ad0330d4a1815be4
- SHA512 5c4698460d70c526ceecdfdc14402df04238ecaa216d6582157d86909f9bfa77e321111bdf6811feaf0614d3cbea39546bb8aba8db5bacbd82c7afdf903b39a8
- SSDEEP 24576:wx/WnSyhbzvZOqU1cxI7Hh9ZBXfNX0Le5ji0hmxNrMej:IWSytLoqUqO7HhpJPji0Ajf
- TLSH T172955C1DFEE48E35D1B35131C8A6C36DAA357D511B30899B1384B72DEE32F91A636322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-23_94f8384dd378eef38ed912158b0329e4_amadey_cobalt-strike_coinminer_elex_hijackloader_redline.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-23_94f8384dd378eef38ed912158b0329e4_amadey_cobalt-strike_coinminer_elex_hijackloader_redline.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-23_94f8384dd378eef38ed912158b0329e4_amadey_cobalt-strike_coinminer_elex_hijackloader_redline-stealer_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 1.9MB
- SHA256 5f5806b5e2f405d1dd98758ea493314afc072d48e175e1e88cac719471c0f60c
- MD5 94f8384dd378eef38ed912158b0329e4
- SHA1 48d453899b1c930ccb91a212ad0330d4a1815be4
- SHA512 5c4698460d70c526ceecdfdc14402df04238ecaa216d6582157d86909f9bfa77e321111bdf6811feaf0614d3cbea39546bb8aba8db5bacbd82c7afdf903b39a8
- SSDEEP 24576:wx/WnSyhbzvZOqU1cxI7Hh9ZBXfNX0Le5ji0hmxNrMej:IWSytLoqUqO7HhpJPji0Ajf
- TLSH T172955C1DFEE48E35D1B35131C8A6C36DAA357D511B30899B1384B72DEE32F91A636322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.