General
- Target 2026-04-25_56c0c7377396a9196ac23a38504abbfc_amadey_cobalt-strike_coinminer_darkgate_hawkeye_icedid_luca-stealer_njrat_remcos_satacom_vidar_wannacry
- Size 4.5MB
- Sample260425-stqeqact3x
- SHA256 48acb8d0ff9cdcd3b8b66d4f329b0f954924ff80913c65ba7ae189dc07408b7b
- MD5 56c0c7377396a9196ac23a38504abbfc
- SHA1 098220ab584a4a7cc80ea5820cdf4de486bafeae
- SHA512 596955b306c364ad6a12c311bf4dfb7c03d52930ac6c95a9a67919ab3ee3a0eafe56a8aa6f8926b850d48e3253dec3700556db172ab49c2290017d65d11f37c2
- SSDEEP 98304:A/j9TIc8NxUTKRuy5a+/j9TIc8NxUTKRuy5ad7ppT:A/jCCTqF/jCCTqgT
- TLSH T142269E22A2D10075E6F22531593992396E7EBA208B328D9F53C05DAD7FB19C09F36737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-25_56c0c7377396a9196ac23a38504abbfc_amadey_cobalt-strike_coinminer_darkgate_hawkeye_icedid_l.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_56c0c7377396a9196ac23a38504abbfc_amadey_cobalt-strike_coinminer_darkgate_hawkeye_icedid_l.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_56c0c7377396a9196ac23a38504abbfc_amadey_cobalt-strike_coinminer_darkgate_hawkeye_icedid_luca-stealer_njrat_remcos_satacom_vidar_wannacry
- Size 4.5MB
- SHA256 48acb8d0ff9cdcd3b8b66d4f329b0f954924ff80913c65ba7ae189dc07408b7b
- MD5 56c0c7377396a9196ac23a38504abbfc
- SHA1 098220ab584a4a7cc80ea5820cdf4de486bafeae
- SHA512 596955b306c364ad6a12c311bf4dfb7c03d52930ac6c95a9a67919ab3ee3a0eafe56a8aa6f8926b850d48e3253dec3700556db172ab49c2290017d65d11f37c2
- SSDEEP 98304:A/j9TIc8NxUTKRuy5a+/j9TIc8NxUTKRuy5ad7ppT:A/jCCTqF/jCCTqgT
- TLSH T142269E22A2D10075E6F22531593992396E7EBA208B328D9F53C05DAD7FB19C09F36737
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.