General
- Target 2026-07-11_cf3d9b1e3feb0cd9a9ea8be31963ee82_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 9.3MB
- Sample260711-slg4dadv6k
- SHA256 1a697147b0d25bbedd8b1caa900c805d79522342c515e7c4e9a5674e33f50854
- MD5 cf3d9b1e3feb0cd9a9ea8be31963ee82
- SHA1 deff039247d2aefc5ec46b210996e27b7f5bcc3c
- SHA512 49307f1fa4e8b0fe059fe77af6857eb23074b49171a832c37f4a7fb6a58b0945cd236d88273bb57cb52b5c824ed6b2196ab177e10814e96256221ce7d6b37435
- SSDEEP 196608:Wpdyn8OyJgV9z8bdsosEU8IBtz/WyZ/K0ttYVAA:sdyndVosEU8IBJuyZ/K0ttYh
- TLSH T174A6AE27F29401F8D0AAC178C6569223EAB2B8550731A7CF17A49BA91F73BE05F3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-11_cf3d9b1e3feb0cd9a9ea8be31963ee82_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_cf3d9b1e3feb0cd9a9ea8be31963ee82_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 9.3MB
- SHA256 1a697147b0d25bbedd8b1caa900c805d79522342c515e7c4e9a5674e33f50854
- MD5 cf3d9b1e3feb0cd9a9ea8be31963ee82
- SHA1 deff039247d2aefc5ec46b210996e27b7f5bcc3c
- SHA512 49307f1fa4e8b0fe059fe77af6857eb23074b49171a832c37f4a7fb6a58b0945cd236d88273bb57cb52b5c824ed6b2196ab177e10814e96256221ce7d6b37435
- SSDEEP 196608:Wpdyn8OyJgV9z8bdsosEU8IBtz/WyZ/K0ttYVAA:sdyndVosEU8IBJuyZ/K0ttYh
- TLSH T174A6AE27F29401F8D0AAC178C6569223EAB2B8550731A7CF17A49BA91F73BE05F3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory