General
- Target 2026-06-02_9a69e1395f80b6c6c6259c6639dcec44_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 4.7MB
- Sample260602-cb7naaa17y
- SHA256 5097a7202246b6b1955c0df63609d7637038ed187ec9617494f1cc0ad9069d82
- MD5 9a69e1395f80b6c6c6259c6639dcec44
- SHA1 4aab8e17851894d5250d3acd8b9b9dd81ad73188
- SHA512 1f1842b4d65db07929bd31ea97697726672c619428883721c1cd8d496917522cda637d859056b3b1e7f8e0ac65393f68ac7eb393331d2eac7a624351595b2376
- SSDEEP 49152:kpPZuyWSG+BBvGvnjOyYVGlqRONszVBXdc/RJzVBXfqJtb2Ib+SVBXdcBpYqw:khpBinjOykGcPdOR5fmdI6T
- TLSH T1F6369C16B3904277E0B39175C5AA5741EA7138791B31C3CB7388B26A2E337D2993B772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-02_9a69e1395f80b6c6c6259c6639dcec44_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_9a69e1395f80b6c6c6259c6639dcec44_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_9a69e1395f80b6c6c6259c6639dcec44_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 4.7MB
- SHA256 5097a7202246b6b1955c0df63609d7637038ed187ec9617494f1cc0ad9069d82
- MD5 9a69e1395f80b6c6c6259c6639dcec44
- SHA1 4aab8e17851894d5250d3acd8b9b9dd81ad73188
- SHA512 1f1842b4d65db07929bd31ea97697726672c619428883721c1cd8d496917522cda637d859056b3b1e7f8e0ac65393f68ac7eb393331d2eac7a624351595b2376
- SSDEEP 49152:kpPZuyWSG+BBvGvnjOyYVGlqRONszVBXdc/RJzVBXfqJtb2Ib+SVBXdcBpYqw:khpBinjOykGcPdOR5fmdI6T
- TLSH T1F6369C16B3904277E0B39175C5AA5741EA7138791B31C3CB7388B26A2E337D2993B772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory