General
- Target 2026-08-03_9c2488c6047dd3a83db43204076adca0_amadey_cobalt-strike_coinminer_darkgate_frostygoop_glassworm_hijackloader_hive_icedid_knight_luca-stealer_remcos_rhadamanthys_salatstealer_satacom_sliver_stealc_vidar
- Size 39.8MB
- Sample260804-mnl78ahf59
- SHA256 fd40f403469acd7efee5af98de9e5dac54760d127b87f655fda8d26ed96127ea
- MD5 9c2488c6047dd3a83db43204076adca0
- SHA1 77d1adc1fd7b12e429b9d54c33876e68e481cc32
- SHA512 bdf4011f86e0d81846e7da8736c1ad4a459f6847a3f2bf95f192ca5b8dadb255674f7ec04b20178523cd29bb316a4ede55e947fc78c4cac8d00a8f083f040687
- SSDEEP 393216:Mv0ZbDH+nPbz9EWIZovbVhrUAJXhLgbOV22o1/fwMGNZ0ugNfjD/oFDYcrBlzArz:Mv0tH+PX1wHAu1AMG/tIn
- TLSH T10E97CF02B7E80066F1BB9734C9B78612EA36BC651B31D3DF1290A66D1E737C09E35726
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_9c2488c6047dd3a83db43204076adca0_amadey_cobalt-strike_coinminer_darkgate_frostygoop_glass.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_9c2488c6047dd3a83db43204076adca0_amadey_cobalt-strike_coinminer_darkgate_frostygoop_glassworm_hijackloader_hive_icedid_knight_luca-stealer_remcos_rhadamanthys_salatstealer_satacom_sliver_stealc_vidar
- Size 39.8MB
- SHA256 fd40f403469acd7efee5af98de9e5dac54760d127b87f655fda8d26ed96127ea
- MD5 9c2488c6047dd3a83db43204076adca0
- SHA1 77d1adc1fd7b12e429b9d54c33876e68e481cc32
- SHA512 bdf4011f86e0d81846e7da8736c1ad4a459f6847a3f2bf95f192ca5b8dadb255674f7ec04b20178523cd29bb316a4ede55e947fc78c4cac8d00a8f083f040687
- SSDEEP 393216:Mv0ZbDH+nPbz9EWIZovbVhrUAJXhLgbOV22o1/fwMGNZ0ugNfjD/oFDYcrBlzArz:Mv0tH+PX1wHAu1AMG/tIn
- TLSH T10E97CF02B7E80066F1BB9734C9B78612EA36BC651B31D3DF1290A66D1E737C09E35726
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.