General
- Target 2026-08-03_a15998d39485aef05f9a8e8629674955_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 50.9MB
- Sample260804-mjj73atte1
- SHA256 ae666b923e49ad2d07800c0213af2df4b931bd686b0ba82b7ea63ef0e05e11e1
- MD5 a15998d39485aef05f9a8e8629674955
- SHA1 2d2dddac96dfd033e83953ec804112a21c629348
- SHA512 180ad4c3ed46415cb33bf3a2d5cb12ff5ddda11ed32e60893a9efc08f3a08926107a77d54f648ccb986c53d2c9626f85786a61e30e9b9b773f89ab097658e194
- SSDEEP 393216:2cD2cDIEU8IBJ4cD2cDIEU8IBJ9cD2cDIEU8IBJ4cD2cDIEU8IBJh:tZMz7ZMz2ZMz7ZMzh
- TLSH T15FC79D17F6A440F5D17A953485A69232EB72BC120B318BCB53A4F66D1F337D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_a15998d39485aef05f9a8e8629674955_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_a15998d39485aef05f9a8e8629674955_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_a15998d39485aef05f9a8e8629674955_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 50.9MB
- SHA256 ae666b923e49ad2d07800c0213af2df4b931bd686b0ba82b7ea63ef0e05e11e1
- MD5 a15998d39485aef05f9a8e8629674955
- SHA1 2d2dddac96dfd033e83953ec804112a21c629348
- SHA512 180ad4c3ed46415cb33bf3a2d5cb12ff5ddda11ed32e60893a9efc08f3a08926107a77d54f648ccb986c53d2c9626f85786a61e30e9b9b773f89ab097658e194
- SSDEEP 393216:2cD2cDIEU8IBJ4cD2cDIEU8IBJ9cD2cDIEU8IBJ4cD2cDIEU8IBJh:tZMz7ZMz2ZMz7ZMzh
- TLSH T15FC79D17F6A440F5D17A953485A69232EB72BC120B318BCB53A4F66D1F337D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry