General
- Target 2026-07-02_f7d011b3871ea5c56775f2b12cef8789_amadey_cobalt-strike_coinminer_elex_icedid_luca-stealer_njrat_remcos_rugmi_vidar
- Size 1.1MB
- Sample260702-19tfbacv3q
- SHA256 caa8945887dd0c2fd4d3dbb9e5d408b9236c3d2e2a91981ca5d09c48b6e986a9
- MD5 f7d011b3871ea5c56775f2b12cef8789
- SHA1 aae6786aadcc938426b5f5bcf214916da4004efa
- SHA512 c479da44f83be4b17d39e5f1b4a46276b8efb2016e767792904d32344939ff1b6ad5cd293080fd0c9375f62dacc569ce44755f5e20c7607b4ca8620fef4ed6f4
- SSDEEP 24576:Wbw+V3WnIZuMCxezot7kGFYKWoSip2ZzrTg7vxcRn:Wbw+VLZ5zot7k1KRXpyPu6n
- TLSH T1B745BF3271E04072F6F21532BA349530BE3DBE241B60C99E93D4BA1D7E769819BB7352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-02_f7d011b3871ea5c56775f2b12cef8789_amadey_cobalt-strike_coinminer_elex_icedid_luca-stealer_njrat_remcos_rugmi_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_f7d011b3871ea5c56775f2b12cef8789_amadey_cobalt-strike_coinminer_elex_icedid_luca-stealer_njrat_remcos_rugmi_vidar.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_f7d011b3871ea5c56775f2b12cef8789_amadey_cobalt-strike_coinminer_elex_icedid_luca-stealer_njrat_remcos_rugmi_vidar
- Size 1.1MB
- SHA256 caa8945887dd0c2fd4d3dbb9e5d408b9236c3d2e2a91981ca5d09c48b6e986a9
- MD5 f7d011b3871ea5c56775f2b12cef8789
- SHA1 aae6786aadcc938426b5f5bcf214916da4004efa
- SHA512 c479da44f83be4b17d39e5f1b4a46276b8efb2016e767792904d32344939ff1b6ad5cd293080fd0c9375f62dacc569ce44755f5e20c7607b4ca8620fef4ed6f4
- SSDEEP 24576:Wbw+V3WnIZuMCxezot7kGFYKWoSip2ZzrTg7vxcRn:Wbw+VLZ5zot7k1KRXpyPu6n
- TLSH T1B745BF3271E04072F6F21532BA349530BE3DBE241B60C99E93D4BA1D7E769819BB7352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Adds Run key to start application