General
- Target 2026-05-10_e126d71488dd2ce9d5a8d433dec5be4f_amadey_cobalt-strike_coinminer_glassworm_icedid_rugmi_satacom_smoke-loader_vidar_wannacry
- Size 1.8MB
- Sample260510-grcv3acy2m
- SHA256 b7190e4387440f7bbb0daa83c5a2417f6d70879a3820b306212cd097c82e0a20
- MD5 e126d71488dd2ce9d5a8d433dec5be4f
- SHA1 ffc4c796403209a06c960e64cb445f13334146d4
- SHA512 d7b15c784f0637d9ec9fbfe795c2fe329b191185b136e528c8e3d7d51f4242a6a879c07c27710c0de0627fc6be6dd24f475c08042c6101459e76ec085c329e49
- SSDEEP 49152:c/ev61/ev62vung+HOH/sqatgl6o/ev6I:2DYvupw/y9aq
- TLSH T1BB955B26BA5450B2D16205318512965EAB71B814DB134FDF2390AEFEFFF26C0AF36631
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-10_e126d71488dd2ce9d5a8d433dec5be4f_amadey_cobalt-strike_coinminer_glassworm_icedid_rugmi_sa.exe
Resource
win10v2004-20250619-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-10_e126d71488dd2ce9d5a8d433dec5be4f_amadey_cobalt-strike_coinminer_glassworm_icedid_rugmi_sa.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-10_e126d71488dd2ce9d5a8d433dec5be4f_amadey_cobalt-strike_coinminer_glassworm_icedid_rugmi_satacom_smoke-loader_vidar_wannacry
- Size 1.8MB
- SHA256 b7190e4387440f7bbb0daa83c5a2417f6d70879a3820b306212cd097c82e0a20
- MD5 e126d71488dd2ce9d5a8d433dec5be4f
- SHA1 ffc4c796403209a06c960e64cb445f13334146d4
- SHA512 d7b15c784f0637d9ec9fbfe795c2fe329b191185b136e528c8e3d7d51f4242a6a879c07c27710c0de0627fc6be6dd24f475c08042c6101459e76ec085c329e49
- SSDEEP 49152:c/ev61/ev62vung+HOH/sqatgl6o/ev6I:2DYvupw/y9aq
- TLSH T1BB955B26BA5450B2D16205318512965EAB71B814DB134FDF2390AEFEFFF26C0AF36631
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.