General
- Target 2026-05-31_03e855f5fe007711a3f1ff256d42ba8d_amadey_cobalt-strike_coinminer_elex_icedid_luca-stealer_njrat_remcos_rugmi_vidar
- Size 1.1MB
- Sample260531-e6t2sahv6s
- SHA256 b8d9105d2f524d752d629cd4de3a55801dcfd8556c2a2e13e9eed1a190195012
- MD5 03e855f5fe007711a3f1ff256d42ba8d
- SHA1 d804d850c2ef875d51596d0737398cbd52eca7b7
- SHA512 f62c3e33bb33ae80c5c3d37dc408127f5a69bc1e29628182fe7f485a94f9a21f48126d7700990944737f4ceecde1b4d1f7677fc4f807a6a5c8916c9ff2d44944
- SSDEEP 24576:Wbx+V3WnIZuMCxezot7kGFYKWoSip2ZzrTg7vxcRD:Wbx+VLZ5zot7k1KRXpyPu6D
- TLSH T1E645BF3271E04072F6F21532BA349530BE3DBE241B60C99EA3D4B91D7E769819BB7352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-31_03e855f5fe007711a3f1ff256d42ba8d_amadey_cobalt-strike_coinminer_elex_icedid_luca-stealer_njrat_remcos_rugmi_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-31_03e855f5fe007711a3f1ff256d42ba8d_amadey_cobalt-strike_coinminer_elex_icedid_luca-stealer_njrat_remcos_rugmi_vidar.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-31_03e855f5fe007711a3f1ff256d42ba8d_amadey_cobalt-strike_coinminer_elex_icedid_luca-stealer_njrat_remcos_rugmi_vidar
- Size 1.1MB
- SHA256 b8d9105d2f524d752d629cd4de3a55801dcfd8556c2a2e13e9eed1a190195012
- MD5 03e855f5fe007711a3f1ff256d42ba8d
- SHA1 d804d850c2ef875d51596d0737398cbd52eca7b7
- SHA512 f62c3e33bb33ae80c5c3d37dc408127f5a69bc1e29628182fe7f485a94f9a21f48126d7700990944737f4ceecde1b4d1f7677fc4f807a6a5c8916c9ff2d44944
- SSDEEP 24576:Wbx+V3WnIZuMCxezot7kGFYKWoSip2ZzrTg7vxcRD:Wbx+VLZ5zot7k1KRXpyPu6D
- TLSH T1E645BF3271E04072F6F21532BA349530BE3DBE241B60C99EA3D4B91D7E769819BB7352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Adds Run key to start application