2026-07-30_fac276e34469a7b20f7b8b37ac64f40c_amadey_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-30_fac276e34469a7b20f7b8b37ac64f40c_amadey_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar
Size 2.8MB
Sample260730-bc9ctsap7x
SHA256 10936342c3660deb083e662e517c3f5c24b282592b9a8c37efc3245903076e4c
MD5 fac276e34469a7b20f7b8b37ac64f40c
SHA1 cbc93ce229021c8bb787a06d7b75ac8de8449116
SHA512 82338c4debe971e4a25b5439a5acfcd7f9a6ed92503d9d0f8fe7505b0a886160be480b89f90be77233fe66e9be8e04eb25a16f0a3e635e1080ff4487ebf295f6
SSDEEP 49152:viVwASOcGtlqFwIU6iEMISyNJxxBCavh8zAN1ZfvyxzY/LhSHG/wmfIZ9wdPK9UR:PP+Epd6SiCInwc9UR
TLSH
T144D58B15A7B401E4E9BBC2388A275233E7F1B859137087DF4AA896751F23BE16E3D740
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-07-30_fac276e34469a7b20f7b8b37ac64f40c_amadey_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar

File Explorer

2026-07-30_fac276e34469a7b20f7b8b37ac64f40c_amadey_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar

.exe 2.8MB

2026-07-30_fac276e34469a7b20f7b8b37ac64f40c_amadey_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar

IMPHASH 4bcdc37f9995362c01c1cfcafc3a044c
SHA256 10936342c3660deb083e662e517c3f5c24b282592b9a8c37efc3245903076e4c
MD5 fac276e34469a7b20f7b8b37ac64f40c
SHA1 cbc93ce229021c8bb787a06d7b75ac8de8449116
SHA512 82338c4debe971e4a25b5439a5acfcd7f9a6ed92503d9d0f8fe7505b0a886160be480b89f90be77233fe66e9be8e04eb25a16f0a3e635e1080ff4487ebf295f6
SSDEEP 49152:viVwASOcGtlqFwIU6iEMISyNJxxBCavh8zAN1ZfvyxzY/LhSHG/wmfIZ9wdPK9UR:PP+Epd6SiCInwc9UR
TLSH
T144D58B15A7B401E4E9BBC2388A275233E7F1B859137087DF4AA896751F23BE16E3D740
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1962976

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

ws2_32

closesocket connect ioctlsocket htonl htons bind inet_addr WSACleanup WSAGetLastError WSASetLastError WSAStartup getservbyname getservbyport gethostbyname gethostbyaddr socket shutdown send select recv ntohs inet_ntoa __WSAFDIsSet

psapi

GetModuleFileNameExW

advapi32

RegisterEventSourceW DeregisterEventSource ReportEventW

shlwapi

PathIsRelativeW

dbghelp

StackWalk64 SymInitialize SymCleanup SymGetOptions SymSetOptions

bcrypt

BCryptGenRandom

kernel32

FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW GetFileSizeEx MoveFileExW DeleteFileW FlushFileBuffers SetFilePointerEx SetEndOfFile GetConsoleCP SetEnvironmentVariableW GetFullPathNameW GetCurrentDirectoryW HeapReAlloc OutputDebugStringW GetStringTypeW LCMapStringW CompareStringW GetProcessHeap HeapSize SetStdHandle DeleteFiber HeapAlloc HeapFree GetCommandLineW GetCommandLineA ReadFile SetConsoleCtrlHandler FreeLibraryAndExitThread ExitThread CreateThread GetLastError MultiByteToWideChar WideCharToMultiByte GetCurrentThreadId QueryPerformanceCounter QueryPerformanceFrequency GetSystemDirectoryA FreeLibrary GetProcAddress LoadLibraryA FormatMessageW FindClose FindFirstFileW FindNextFileW lstrcmpiA GetModuleHandleW CloseHandle ReleaseMutex WaitForSingleObject CreateMutexW GetCurrentProcessId WaitForMultipleObjectsEx GetExitCodeThread GetCurrentProcess GetCurrentThread GetModuleFileNameA GetModuleHandleExA SetLastError EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree GetStdHandle GetEnvironmentVariableW GetFileType WriteFile SwitchToFiber CreateFiber GetSystemTimeAsFileTime ConvertFiberToThread ConvertThreadToFiber RtlVirtualUnwind GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW GetSystemTime SystemTimeToFileTime RtlCaptureContext RtlLookupFunctionEntry UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetStartupInfoW DuplicateHandle GetTimeZoneInformation FileTimeToSystemTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileInformationByHandle GetDriveTypeW CreateFileW ExitProcess WriteConsoleW RtlUnwindEx LoadLibraryExW RaiseException GetModuleFileNameW GetModuleHandleExW

user32

MessageBoxW GetProcessWindowStation GetUserObjectInformationW

Sharing

General

Malware Config

Signatures

File Explorer

2026-07-30_fac276e34469a7b20f7b8b37ac64f40c_amadey_cobalt-strike_coinminer_glassworm_icedid_njrat_vidar

ws2_32

psapi

advapi32

shlwapi

dbghelp

bcrypt

kernel32

user32

generic