General
- Target 2026-08-03_ee35ffeebdfc5f1c4972dd55f488e1c9_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_rugmi_smoke-loader_vidar_wannacry
- Size 4.6MB
- Sample260803-t2bf7starc
- SHA256 d5c3abe2ad133c4b639ce487d905e4511c037568e71546b150eece536c31ee9a
- MD5 ee35ffeebdfc5f1c4972dd55f488e1c9
- SHA1 e7fa261592413e63961424b0338344dff3e1368f
- SHA512 d1c8a6cc6bf9f79bb2acfe30a7df44e236dec7a31af893beaed5e90fb4a6ae5ca31497639229f99a949ed25adee25f29a054591f2e2bd47a04f2e43b758c0eda
- SSDEEP 98304:njBxcO4EYljM1yje2iU3fUbtYvxFk+kqtvOD:njBxcO4VjMUjezU3fUSAbqtOD
- TLSH T104264911A6D7402DDCE22C76A56FDAF1BF357C180B1086CB7270BE595F329C29A3532A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_ee35ffeebdfc5f1c4972dd55f488e1c9_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_ee35ffeebdfc5f1c4972dd55f488e1c9_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_ee35ffeebdfc5f1c4972dd55f488e1c9_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_rugmi_smoke-loader_vidar_wannacry
- Size 4.6MB
- SHA256 d5c3abe2ad133c4b639ce487d905e4511c037568e71546b150eece536c31ee9a
- MD5 ee35ffeebdfc5f1c4972dd55f488e1c9
- SHA1 e7fa261592413e63961424b0338344dff3e1368f
- SHA512 d1c8a6cc6bf9f79bb2acfe30a7df44e236dec7a31af893beaed5e90fb4a6ae5ca31497639229f99a949ed25adee25f29a054591f2e2bd47a04f2e43b758c0eda
- SSDEEP 98304:njBxcO4EYljM1yje2iU3fUbtYvxFk+kqtvOD:njBxcO4VjMUjezU3fUSAbqtOD
- TLSH T104264911A6D7402DDCE22C76A56FDAF1BF357C180B1086CB7270BE595F329C29A3532A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application
-
Drops file in System32 directory