General
- Target 2026-07-22_48c935820975dd00b62717de96d9012b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 5.5MB
- Sample260722-ye478atclf
- SHA256 58081c42d9fafb3d3afb9d73937a4f3bdaaff2fb0b699234eb84dc52db771e2e
- MD5 48c935820975dd00b62717de96d9012b
- SHA1 b07a104e2b861d7d758e4452e02af78ab3f03fb8
- SHA512 a1d86c5376081e71389c9bd13c1a0dcd079d31941643a6e56d40bebb46373dee4eb09ab70f9555c8f1a6013a50c6419854cde019d6b9a31cfb6acfa8b65709a7
- SSDEEP 49152:9FowL0p9cDDW0qECwa5RitriRyxEPwrVsIskNypf9e84WvcqZMUE5/9KWGmvy/GW:jL+2Hc7YRW9MNcya3ccyy
- TLSH T191467D83FAAA00E4D4BBE13455A26127F975F452033497DBD2546A6F0F32FE0AA3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-22_48c935820975dd00b62717de96d9012b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_48c935820975dd00b62717de96d9012b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-ste.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
Testing Purpose Only
C2
-
http://bullsseo.com:443/agent.ashx
Attributes
-
mesh_id
0x4B20F67211C20CD07E5E53285D1203059159DFF0AC668E10C1DB29007651D5C3BCD6FB31D9DA6E7C120C9F21DAC980BF
-
server_id
460435B76E2BA7A386C796547EE9B205E12F241B5E68453D37FB6DC55D7215361C5860C69962327ED15D48ACFF0C8280
-
wss
wss://bullsseo.com:443/agent.ashx
Targets
-
- Target 2026-07-22_48c935820975dd00b62717de96d9012b_amadey_cobalt-strike_coinminer_glassworm_icedid_luca-stealer_njrat_satacom_stealc
- Size 5.5MB
- SHA256 58081c42d9fafb3d3afb9d73937a4f3bdaaff2fb0b699234eb84dc52db771e2e
- MD5 48c935820975dd00b62717de96d9012b
- SHA1 b07a104e2b861d7d758e4452e02af78ab3f03fb8
- SHA512 a1d86c5376081e71389c9bd13c1a0dcd079d31941643a6e56d40bebb46373dee4eb09ab70f9555c8f1a6013a50c6419854cde019d6b9a31cfb6acfa8b65709a7
- SSDEEP 49152:9FowL0p9cDDW0qECwa5RitriRyxEPwrVsIskNypf9e84WvcqZMUE5/9KWGmvy/GW:jL+2Hc7YRW9MNcya3ccyy
- TLSH T191467D83FAAA00E4D4BBE13455A26127F975F452033497DBD2546A6F0F32FE0AA3E741
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10