General
- Target 2026-07-02_67096924ac343ed686c56a7b79087900_amadey_cobalt-strike_elex_glassworm_hijackloader_nymaim_ramnit_redline-stealer_rhadamanthys_smoke-loader_stealc_vidar
- Size 7.6MB
- Sample260702-2qwl1acy3m
- SHA256 77617e4a0fb6343c7b219ca1f79addc2001342a16223556852440cff4b1b9e82
- MD5 67096924ac343ed686c56a7b79087900
- SHA1 e4610cf108b311fb379d90b5493bdfe7a4c3efb8
- SHA512 66659688789427b8922111c19dcabd31bad16687691460f189af2a15c0073bb9e44863c54ce41f2ba8e2ce3aaedb205e3a95353813fe56bcd6fdf90af79d2ad5
- SSDEEP 98304:7O4mO42O4mO4I1TiYOXwnS4rVJMz2fP5GAAaukoMt77GBfW18xoq2Vjnmd:pIYISHI4fsUGBfWaGnM
- TLSH T1FD868D01B7A5C0B1D1B7A17085B69752A336BD211F32D7EF56857A0E6E33BC18D3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-02_67096924ac343ed686c56a7b79087900_amadey_cobalt-strike_elex_glassworm_hijackloader_nymaim_.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_67096924ac343ed686c56a7b79087900_amadey_cobalt-strike_elex_glassworm_hijackloader_nymaim_.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_67096924ac343ed686c56a7b79087900_amadey_cobalt-strike_elex_glassworm_hijackloader_nymaim_ramnit_redline-stealer_rhadamanthys_smoke-loader_stealc_vidar
- Size 7.6MB
- SHA256 77617e4a0fb6343c7b219ca1f79addc2001342a16223556852440cff4b1b9e82
- MD5 67096924ac343ed686c56a7b79087900
- SHA1 e4610cf108b311fb379d90b5493bdfe7a4c3efb8
- SHA512 66659688789427b8922111c19dcabd31bad16687691460f189af2a15c0073bb9e44863c54ce41f2ba8e2ce3aaedb205e3a95353813fe56bcd6fdf90af79d2ad5
- SSDEEP 98304:7O4mO42O4mO4I1TiYOXwnS4rVJMz2fP5GAAaukoMt77GBfW18xoq2Vjnmd:pIYISHI4fsUGBfWaGnM
- TLSH T1FD868D01B7A5C0B1D1B7A17085B69752A336BD211F32D7EF56857A0E6E33BC18D3A322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of SetThreadContext