General
- Target 2026-05-02_29ca3d8b027148b9222e5bf6d4c7d4ca_amadey_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 18.6MB
- Sample260503-adaefsds6k
- SHA256 96c7d37e0707a6e2c44aff0b9828d89fda70f3deedf6c4e30034d30292ff849b
- MD5 29ca3d8b027148b9222e5bf6d4c7d4ca
- SHA1 3b0f3b37531817bd99ec2712071fba528811247a
- SHA512 99b57c7c1e1f2c5b30a31fc611243e384e56e3b0c9fd4cdaabca39a02d9a03e4e6662981c80272b32288f022d8cc05219c20cfb525dc825d9b26cb60b5b0584f
- SSDEEP 393216://C/bn35q/C/bn35alahvQHrc8u3xXJ/f4uUWHg:g35v35FvQHrK5/f4uUr
- TLSH T11017AE13739685A6C06BE2B88A574212DB7A7C440734A7CF1294BB593F73BE05B3B361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-05-02_29ca3d8b027148b9222e5bf6d4c7d4ca_amadey_cobalt-strike_coinminer_glassworm_hijackloader_ic.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-02_29ca3d8b027148b9222e5bf6d4c7d4ca_amadey_cobalt-strike_coinminer_glassworm_hijackloader_ic.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-02_29ca3d8b027148b9222e5bf6d4c7d4ca_amadey_cobalt-strike_coinminer_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_satacom_smoke-loader_stealc_vidar
- Size 18.6MB
- SHA256 96c7d37e0707a6e2c44aff0b9828d89fda70f3deedf6c4e30034d30292ff849b
- MD5 29ca3d8b027148b9222e5bf6d4c7d4ca
- SHA1 3b0f3b37531817bd99ec2712071fba528811247a
- SHA512 99b57c7c1e1f2c5b30a31fc611243e384e56e3b0c9fd4cdaabca39a02d9a03e4e6662981c80272b32288f022d8cc05219c20cfb525dc825d9b26cb60b5b0584f
- SSDEEP 393216://C/bn35q/C/bn35alahvQHrc8u3xXJ/f4uUWHg:g35v35FvQHrK5/f4uUr
- TLSH T11017AE13739685A6C06BE2B88A574212DB7A7C440734A7CF1294BB593F73BE05B3B361
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with Dotfuscator
-
Detects executables packed with SmartAssembly
-
Detects executables packed with Yano Obfuscator
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.