General
- Target 2026-08-03_eb9ccd407204bd38ba126437b4c3eea5_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 14.0MB
- Sample260804-k29vbsbp6w
- SHA256 5b6879c2249c99c537ed79274d2dd1555bdb3c16ff063a27477834c574de8da9
- MD5 eb9ccd407204bd38ba126437b4c3eea5
- SHA1 cb42ee22323ac5c86f04fd633e1963b2528effa8
- SHA512 683183a0ca5b936e0bd1782056030107fde97f0100e17af1f9d5791810655ab34379d10e7f0ccced6fcb552a70b305960e584eb9821b88d1b28df7ad624b1c88
- SSDEEP 98304:+e5x6c1w+q0XlBhs6sTIg/EdezSC6v2XMHOnUm8Ule5x6c1w+q0XlBhs6sTC/h1+:lMQvg8ap18U6MQD/h1+
- TLSH T139E63917FAB211E5C8BAC13886927237BD71BC5547349BD39644A62A0F33BF0AA3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_eb9ccd407204bd38ba126437b4c3eea5_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_eb9ccd407204bd38ba126437b4c3eea5_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_eb9ccd407204bd38ba126437b4c3eea5_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar
- Size 14.0MB
- SHA256 5b6879c2249c99c537ed79274d2dd1555bdb3c16ff063a27477834c574de8da9
- MD5 eb9ccd407204bd38ba126437b4c3eea5
- SHA1 cb42ee22323ac5c86f04fd633e1963b2528effa8
- SHA512 683183a0ca5b936e0bd1782056030107fde97f0100e17af1f9d5791810655ab34379d10e7f0ccced6fcb552a70b305960e584eb9821b88d1b28df7ad624b1c88
- SSDEEP 98304:+e5x6c1w+q0XlBhs6sTIg/EdezSC6v2XMHOnUm8Ule5x6c1w+q0XlBhs6sTC/h1+:lMQvg8ap18U6MQD/h1+
- TLSH T139E63917FAB211E5C8BAC13886927237BD71BC5547349BD39644A62A0F33BF0AA3D714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry