General
- Target 2026-07-14_f9f13960c7abf73205d6290c3c6ccd4d_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_smoke-loader_stealc_vidar_zxxz
- Size 36.0MB
- Sample260714-c63b2scx2r
- SHA256 2831aaf2aebba7a057da147828dd973b3250d5627d406a6a0996f7dc718176b8
- MD5 f9f13960c7abf73205d6290c3c6ccd4d
- SHA1 98eb290093b3a35be29f05b0839821dbc3553cda
- SHA512 ac6eaf8401b831607e573344d7d24a2a6728723d7ef118023141a39facd1d11c09d2bfaffe345b4617aef3f0228a648449913c3c1f9527e323c940256a3f17bd
- SSDEEP 393216:uJgHDlanaGBXvDKtz+bhPWES4tiNQPNrIKc4gaPbUAgrO4mg7w6l+Z6rYsVNi4oF:ucon1HvSzxAMN7iZ6rYkO7k4
- TLSH T191879E03B2A501A6E4B7D2388AA74203E772B8674731CACF315D03551FBBAE09A7F755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-14_f9f13960c7abf73205d6290c3c6ccd4d_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_f9f13960c7abf73205d6290c3c6ccd4d_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_f9f13960c7abf73205d6290c3c6ccd4d_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_smoke-loader_stealc_vidar_zxxz
- Size 36.0MB
- SHA256 2831aaf2aebba7a057da147828dd973b3250d5627d406a6a0996f7dc718176b8
- MD5 f9f13960c7abf73205d6290c3c6ccd4d
- SHA1 98eb290093b3a35be29f05b0839821dbc3553cda
- SHA512 ac6eaf8401b831607e573344d7d24a2a6728723d7ef118023141a39facd1d11c09d2bfaffe345b4617aef3f0228a648449913c3c1f9527e323c940256a3f17bd
- SSDEEP 393216:uJgHDlanaGBXvDKtz+bhPWES4tiNQPNrIKc4gaPbUAgrO4mg7w6l+Z6rYsVNi4oF:ucon1HvSzxAMN7iZ6rYkO7k4
- TLSH T191879E03B2A501A6E4B7D2388AA74203E772B8674731CACF315D03551FBBAE09A7F755
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist