General
- Target 2026-05-03_e3ef0bf78df976c07f6de00a68731c98_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 8.3MB
- Sample260503-e2ljvabw3t
- SHA256 22c5a7f23e60ad54d1e08470ddd64c8733245d2789a0d231439f807b5eee3bf9
- MD5 e3ef0bf78df976c07f6de00a68731c98
- SHA1 cd2a2c83040392e3efdc50f905a398b7d434e8c6
- SHA512 63728995ed4422fcc861c4473f026e12e775ac6ba59ae540864dd978997d1c5de23ad27dd77ffd6632800287ad51ab496ee91333f3911b8d97b8de9dbcc996c6
- SSDEEP 98304:ShpBinjOykGcIBdAWQtZ/K0tGOFWVRuQHD5fkZcDB:WpAnjOynBdAWyZ/K0ttYVAQHhPDB
- TLSH T19B968D16F2A44376D0B3C0B9C6D6A756EA3234951B30D6CB2385F7692E33BD1863A731
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-03_e3ef0bf78df976c07f6de00a68731c98_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-03_e3ef0bf78df976c07f6de00a68731c98_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 8.3MB
- SHA256 22c5a7f23e60ad54d1e08470ddd64c8733245d2789a0d231439f807b5eee3bf9
- MD5 e3ef0bf78df976c07f6de00a68731c98
- SHA1 cd2a2c83040392e3efdc50f905a398b7d434e8c6
- SHA512 63728995ed4422fcc861c4473f026e12e775ac6ba59ae540864dd978997d1c5de23ad27dd77ffd6632800287ad51ab496ee91333f3911b8d97b8de9dbcc996c6
- SSDEEP 98304:ShpBinjOykGcIBdAWQtZ/K0tGOFWVRuQHD5fkZcDB:WpAnjOynBdAWyZ/K0ttYVAQHhPDB
- TLSH T19B968D16F2A44376D0B3C0B9C6D6A756EA3234951B30D6CB2385F7692E33BD1863A731
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory