General
- Target 2026-07-30_e3999a09682dd32e1a421db4eae6fd3c_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_smoke-loader_stop_tofsee_vidar_wannacry
- Size 11.9MB
- Sample260730-bf8wgaztcs
- SHA256 77151159fc59971523eaf40101d474aeadf3d5c89aae2625d3e8167126ec3712
- MD5 e3999a09682dd32e1a421db4eae6fd3c
- SHA1 eb5df3a0dc0a23d873daea277902847eb23253cc
- SHA512 db8027279cc448f99c42fcd37d30a7da0ed4119f9754200c86ed43309abb1bf4c45432ab36e4d20412d52a0d8f12f1b31eaee6ebc74df2f01ad2ecef318b77c6
- SSDEEP 98304:kIOERqd/6hkB/qoHMdnJE7hAlKnsz2C2PYdhIqHpnq0E4jovLapINTIOSAIwRv:SEYd/6ZJEul4szEonqtaovcINTf8wF
- TLSH T12CC68D3275D58136D1664135CAA56FB4C3A57C3A4BF182CB76807AAE1E723C27D32B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-30_e3999a09682dd32e1a421db4eae6fd3c_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_e3999a09682dd32e1a421db4eae6fd3c_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_e3999a09682dd32e1a421db4eae6fd3c_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_njrat_rhadamanthys_smoke-loader_stop_tofsee_vidar_wannacry
- Size 11.9MB
- SHA256 77151159fc59971523eaf40101d474aeadf3d5c89aae2625d3e8167126ec3712
- MD5 e3999a09682dd32e1a421db4eae6fd3c
- SHA1 eb5df3a0dc0a23d873daea277902847eb23253cc
- SHA512 db8027279cc448f99c42fcd37d30a7da0ed4119f9754200c86ed43309abb1bf4c45432ab36e4d20412d52a0d8f12f1b31eaee6ebc74df2f01ad2ecef318b77c6
- SSDEEP 98304:kIOERqd/6hkB/qoHMdnJE7hAlKnsz2C2PYdhIqHpnq0E4jovLapINTIOSAIwRv:SEYd/6ZJEul4szEonqtaovcINTf8wF
- TLSH T12CC68D3275D58136D1664135CAA56FB4C3A57C3A4BF182CB76807AAE1E723C27D32B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory