General
- Target 2026-06-02_9f5cc34b32ff972f5cfb936ebf823774_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 4.3MB
- Sample260602-egd92aex3k
- SHA256 c9194e8ee70d09419778ad80bace1f4dbd8209d5d61cae404795f81aa2257aad
- MD5 9f5cc34b32ff972f5cfb936ebf823774
- SHA1 fce7be772aafd91e9df6ebbefd07dddcf8b38503
- SHA512 ccdd5253bc0617deee7627fc2065ffd40e75135e5243a51d284615e054b20c40203a0cb361f27a3a302c2460b79bef4b8ee17e1aee78b2547ef97f0418989a64
- SSDEEP 49152:kpPZuyWSG+BBvGvnjOyYVGlqRONszVBXdc/RJzVBXfqJtb2Ib+SVBXdci:khpBinjOykGcPdOR5fmd9
- TLSH T1B7269D06B3900277E0B39175C5AA5741DA7138781B31D3DB7388B65A2E337D29A3BB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-02_9f5cc34b32ff972f5cfb936ebf823774_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_9f5cc34b32ff972f5cfb936ebf823774_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_9f5cc34b32ff972f5cfb936ebf823774_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 4.3MB
- SHA256 c9194e8ee70d09419778ad80bace1f4dbd8209d5d61cae404795f81aa2257aad
- MD5 9f5cc34b32ff972f5cfb936ebf823774
- SHA1 fce7be772aafd91e9df6ebbefd07dddcf8b38503
- SHA512 ccdd5253bc0617deee7627fc2065ffd40e75135e5243a51d284615e054b20c40203a0cb361f27a3a302c2460b79bef4b8ee17e1aee78b2547ef97f0418989a64
- SSDEEP 49152:kpPZuyWSG+BBvGvnjOyYVGlqRONszVBXdc/RJzVBXfqJtb2Ib+SVBXdci:khpBinjOykGcPdOR5fmd9
- TLSH T1B7269D06B3900277E0B39175C5AA5741DA7138781B31D3DB7388B65A2E337D29A3BB72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory