General
- Target 2026-05-11_8e2948a9ee2df05195f39f1f78e5229e_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 8.9MB
- Sample260511-pbbxtsct5l
- SHA256 23159ceabf32b2959f4deaf8b10adab2c133bbeefc49e3bb5512cff3d87c2c22
- MD5 8e2948a9ee2df05195f39f1f78e5229e
- SHA1 8523830e0d62af4b4ef8f9f0ed86c1df6b26baed
- SHA512 b6fe1aa8e00c67741d7ae0811c2ad80bad3be3f11f929956018a588a75652970845c0ab6522b17c55499ebfdf96718f6f1cd776daddcdfbcf05346695ff13e37
- SSDEEP 98304:lhpBinjOykGcIBdAWQtZ/K0tGOFWVRuQgLapI1D8jo6:TpAnjOynBdAWyZ/K0ttYVAQgcI1io6
- TLSH T130967D12F2A00276D066D075CB969725EBB13C694BF0D2DB6244B3D92F33BD1B63A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-11_8e2948a9ee2df05195f39f1f78e5229e_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_8e2948a9ee2df05195f39f1f78e5229e_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 8.9MB
- SHA256 23159ceabf32b2959f4deaf8b10adab2c133bbeefc49e3bb5512cff3d87c2c22
- MD5 8e2948a9ee2df05195f39f1f78e5229e
- SHA1 8523830e0d62af4b4ef8f9f0ed86c1df6b26baed
- SHA512 b6fe1aa8e00c67741d7ae0811c2ad80bad3be3f11f929956018a588a75652970845c0ab6522b17c55499ebfdf96718f6f1cd776daddcdfbcf05346695ff13e37
- SSDEEP 98304:lhpBinjOykGcIBdAWQtZ/K0tGOFWVRuQgLapI1D8jo6:TpAnjOynBdAWyZ/K0ttYVAQgcI1io6
- TLSH T130967D12F2A00276D066D075CB969725EBB13C694BF0D2DB6244B3D92F33BD1B63A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory