General
- Target 2026-07-28_0964f2bed0a2eb1a4d3dd844b170dba0_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 17.2MB
- Sample260729-cantsasblc
- SHA256 83a610afc832c3ec20e886c6743beb9181b9b869d286d7f3926b63e0e99a23e8
- MD5 0964f2bed0a2eb1a4d3dd844b170dba0
- SHA1 891f8016444b2a0db9dee582a497ef865cb672b1
- SHA512 4b16d0f3fd29c1f44a1df980caceee6c5d4183c46883acb8d79120f91f7d74eaa37abc5c965a9a080ebbb71369c6174057a7ccdac93010980adfa55b36247f14
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzkw5G72VhK:2cD2cDIEU8IBJkwme8
- TLSH T1DE079E17F6A440F9D06AC57486969232EB72BC110B319BCF53A4F6692F33AD05F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-28_0964f2bed0a2eb1a4d3dd844b170dba0_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_0964f2bed0a2eb1a4d3dd844b170dba0_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_0964f2bed0a2eb1a4d3dd844b170dba0_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_luca-stealer_njrat_remcos_stealc_vidar
- Size 17.2MB
- SHA256 83a610afc832c3ec20e886c6743beb9181b9b869d286d7f3926b63e0e99a23e8
- MD5 0964f2bed0a2eb1a4d3dd844b170dba0
- SHA1 891f8016444b2a0db9dee582a497ef865cb672b1
- SHA512 4b16d0f3fd29c1f44a1df980caceee6c5d4183c46883acb8d79120f91f7d74eaa37abc5c965a9a080ebbb71369c6174057a7ccdac93010980adfa55b36247f14
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzkw5G72VhK:2cD2cDIEU8IBJkwme8
- TLSH T1DE079E17F6A440F9D06AC57486969232EB72BC110B319BCF53A4F6692F33AD05F3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry