General
- Target 2026-08-03_f56e1e5c33f46908799f9618668f86ae_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_stealc_stop_vidar_wannacry
- Size 9.1MB
- Sample260803-q1ynkaae52
- SHA256 77f5599472390bc6593c6eee8331a2ea5c00fe956f6d746c3ea3e28e365c747d
- MD5 f56e1e5c33f46908799f9618668f86ae
- SHA1 6b3102d60b674570fe7f31b943b37794e614dd18
- SHA512 331cf54f7245db3cb91ac1df0185e293a2e6cca59133f4c1b405785d7cfab09b629b8d9c0d5e0af5f348ecc09ed8214ff3092fea7c66f6557f2b59de50e6f2c3
- SSDEEP 196608:0+oAEU8IBtzMeGZF6bUpMBF1p/kjRm4OWi6:aAEU8IBJgIbUwF1VERmj6
- TLSH T1F4A6F126F6A401E8D477C178C8969237E6B1B8160B7187CB17A49A7E1F33BE14E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_f56e1e5c33f46908799f9618668f86ae_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_f56e1e5c33f46908799f9618668f86ae_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glas.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_f56e1e5c33f46908799f9618668f86ae_amadey_cobalt-strike_coinminer_darkgate_elex_emotet_glassworm_hijackloader_luca-stealer_njrat_remcos_smoke-loader_stealc_stop_vidar_wannacry
- Size 9.1MB
- SHA256 77f5599472390bc6593c6eee8331a2ea5c00fe956f6d746c3ea3e28e365c747d
- MD5 f56e1e5c33f46908799f9618668f86ae
- SHA1 6b3102d60b674570fe7f31b943b37794e614dd18
- SHA512 331cf54f7245db3cb91ac1df0185e293a2e6cca59133f4c1b405785d7cfab09b629b8d9c0d5e0af5f348ecc09ed8214ff3092fea7c66f6557f2b59de50e6f2c3
- SSDEEP 196608:0+oAEU8IBtzMeGZF6bUpMBF1p/kjRm4OWi6:aAEU8IBJgIbUwF1VERmj6
- TLSH T1F4A6F126F6A401E8D477C178C8969237E6B1B8160B7187CB17A49A7E1F33BE14E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Drops file in System32 directory