General
- Target 2026-07-01_3c29cfa2c8fb97c77a0c2e53bcf3a635_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 15.2MB
- Sample260701-2a8xdsft8p
- SHA256 1e9494d22cbca8a4fd0e7e19682ad677deff5badea63484a71b288ba41006eac
- MD5 3c29cfa2c8fb97c77a0c2e53bcf3a635
- SHA1 8d7b2f16f708d06ef4fd7c4c3c70f299477a23b5
- SHA512 3a36cd4f463cd2f8d09aeb4815f3f15e7bc58071a0ad9927c00ffd1049a4aa0ebe0801ce952e1cedb69f3a4c6450b225c6d67170d3bba03edd481d57fcfeb2b6
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzkw5G//h1+0:2cD2cDIEU8IBJkwW
- TLSH T1FBF69D16F6A440F5D17AC574C5A69236EB72BC120B318BCB43A4F66D2F336D09E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-01_3c29cfa2c8fb97c77a0c2e53bcf3a635_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_3c29cfa2c8fb97c77a0c2e53bcf3a635_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_3c29cfa2c8fb97c77a0c2e53bcf3a635_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 15.2MB
- SHA256 1e9494d22cbca8a4fd0e7e19682ad677deff5badea63484a71b288ba41006eac
- MD5 3c29cfa2c8fb97c77a0c2e53bcf3a635
- SHA1 8d7b2f16f708d06ef4fd7c4c3c70f299477a23b5
- SHA512 3a36cd4f463cd2f8d09aeb4815f3f15e7bc58071a0ad9927c00ffd1049a4aa0ebe0801ce952e1cedb69f3a4c6450b225c6d67170d3bba03edd481d57fcfeb2b6
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzkw5G//h1+0:2cD2cDIEU8IBJkwW
- TLSH T1FBF69D16F6A440F5D17AC574C5A69236EB72BC120B318BCB43A4F66D2F336D09E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry