General
- Target 2026-06-27_6df68bba975b8596e4e40d8507805347_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 11.8MB
- Sample260629-g3294aez7v
- SHA256 8c8f31e038c377a536ec1e9653be3cf4806afadb46c4b879df01f22fa7eac895
- MD5 6df68bba975b8596e4e40d8507805347
- SHA1 f42c0a9cc4eee59950d974469b63aa2ec352c407
- SHA512 1cd62b3c6639cd18c501212227307709d4a3b4f2aa409be9d92da420436b2039aff49b21b7264e05ccc443a528175ea442d8510f33b37a87a09e808e48240e11
- SSDEEP 196608:8pdyn8OyJgV9z8bdsosEU8IBtz/WyZ/K0ttYVAATm606E:OdyndVosEU8IBJuyZ/K0ttYZThDE
- TLSH T196C69E13F2A401F9E0A7D178CA669222EB727C5507B197DF229476E81F33AD06F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-27_6df68bba975b8596e4e40d8507805347_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_6df68bba975b8596e4e40d8507805347_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win11ltsc2024-20260617-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_6df68bba975b8596e4e40d8507805347_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 11.8MB
- SHA256 8c8f31e038c377a536ec1e9653be3cf4806afadb46c4b879df01f22fa7eac895
- MD5 6df68bba975b8596e4e40d8507805347
- SHA1 f42c0a9cc4eee59950d974469b63aa2ec352c407
- SHA512 1cd62b3c6639cd18c501212227307709d4a3b4f2aa409be9d92da420436b2039aff49b21b7264e05ccc443a528175ea442d8510f33b37a87a09e808e48240e11
- SSDEEP 196608:8pdyn8OyJgV9z8bdsosEU8IBtz/WyZ/K0ttYVAATm606E:OdyndVosEU8IBJuyZ/K0ttYZThDE
- TLSH T196C69E13F2A401F9E0A7D178CA669222EB727C5507B197DF229476E81F33AD06F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory