General
- Target 2026-05-23_21dd78a02cf81abc6685df8d1d18e327_amadey_cobalt-strike_coinminer_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_rugmi_satacom_stealc_vidar_wannacry
- Size 3.3MB
- Sample260523-ceb1saay2n
- SHA256 8fcee9ff4ae39a887f21ed0779c77fcc1d5bcf2e940bf14747316215320a90d5
- MD5 21dd78a02cf81abc6685df8d1d18e327
- SHA1 a1fc36d3b6f06a7ebdccf13bd9b62b2c85cbf11d
- SHA512 5fb37a750abb5e8de4f6b9825f92363c74f1481f2f1fe6f55486f0451dda077b2d8fd3e4ebe79b241756f841aafc0773fc7ab267e85be151e6fb1fee485002ee
- SSDEEP 49152:A5BjBbTpiXbo8NONaIsZrupO4q7rHbBSUldP0v7f8IUhabas4f7mLZAW2ROQcveZ:A/j9TIc8NxLiO4q75Av7fbUhabgZ4TM
- TLSH T181F55B3969E841AAF0B34B31C971A595BA35BCA67B00DE8F11D1230E0D37B819D75F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-23_21dd78a02cf81abc6685df8d1d18e327_amadey_cobalt-strike_coinminer_luca-stealer_njrat_redlin.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_21dd78a02cf81abc6685df8d1d18e327_amadey_cobalt-strike_coinminer_luca-stealer_njrat_redlin.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_21dd78a02cf81abc6685df8d1d18e327_amadey_cobalt-strike_coinminer_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_rugmi_satacom_stealc_vidar_wannacry
- Size 3.3MB
- SHA256 8fcee9ff4ae39a887f21ed0779c77fcc1d5bcf2e940bf14747316215320a90d5
- MD5 21dd78a02cf81abc6685df8d1d18e327
- SHA1 a1fc36d3b6f06a7ebdccf13bd9b62b2c85cbf11d
- SHA512 5fb37a750abb5e8de4f6b9825f92363c74f1481f2f1fe6f55486f0451dda077b2d8fd3e4ebe79b241756f841aafc0773fc7ab267e85be151e6fb1fee485002ee
- SSDEEP 49152:A5BjBbTpiXbo8NONaIsZrupO4q7rHbBSUldP0v7f8IUhabas4f7mLZAW2ROQcveZ:A/j9TIc8NxLiO4q75Av7fbUhabgZ4TM
- TLSH T181F55B3969E841AAF0B34B31C971A595BA35BCA67B00DE8F11D1230E0D37B819D75F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables manipulated with Fody
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.