General
- Target 2026-07-06_a0ba7a0b140255f0f47c7c9ca81b5e5f_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.3MB
- Sample260707-cbrl3afw8w
- SHA256 6ac213eadb7ef1416fb2f6add3df1191d2166768405fda0c503a5b615ca9a176
- MD5 a0ba7a0b140255f0f47c7c9ca81b5e5f
- SHA1 b784bace6b5f826516e2337e7d58119ab7ad0cc5
- SHA512 c219fc296d43b83da9818f2caf08b4b7b678c0544a34e5f5facb698bafdb16fe9091c82ee85fc94e670fb81c95adce07e5845104c7bb3062d56a9420f33a871d
- SSDEEP 98304:+e5x6c1w+q0XlBhs6sTIg/EdezSC6v2XMHOnUm8U9/h1+JWQtZ/K0tGOFWVRuLfu:lMQvg8ap18U9/h1+JWyZ/K0ttYVAAT
- TLSH T19FE64A13F6B541E5D4BAC138CA626232FE71BC56477097DB1640B2AA1F33BE0AA3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_a0ba7a0b140255f0f47c7c9ca81b5e5f_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_a0ba7a0b140255f0f47c7c9ca81b5e5f_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260706-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_a0ba7a0b140255f0f47c7c9ca81b5e5f_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 13.3MB
- SHA256 6ac213eadb7ef1416fb2f6add3df1191d2166768405fda0c503a5b615ca9a176
- MD5 a0ba7a0b140255f0f47c7c9ca81b5e5f
- SHA1 b784bace6b5f826516e2337e7d58119ab7ad0cc5
- SHA512 c219fc296d43b83da9818f2caf08b4b7b678c0544a34e5f5facb698bafdb16fe9091c82ee85fc94e670fb81c95adce07e5845104c7bb3062d56a9420f33a871d
- SSDEEP 98304:+e5x6c1w+q0XlBhs6sTIg/EdezSC6v2XMHOnUm8U9/h1+JWQtZ/K0tGOFWVRuLfu:lMQvg8ap18U9/h1+JWyZ/K0ttYVAAT
- TLSH T19FE64A13F6B541E5D4BAC138CA626232FE71BC56477097DB1640B2AA1F33BE0AA3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Drops file in Drivers directory
Adds Run key to start application
Sets desktop wallpaper using registry