General
- Target 2026-08-03_6c91c30e3c154c69b5f347371eed692d_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 12.4MB
- Sample260804-nlcrfaac95
- SHA256 8a17686dbab9e92eea477c5b8f3d1f2b79533a5dfb8eef098af19d7717bad823
- MD5 6c91c30e3c154c69b5f347371eed692d
- SHA1 e5372e7493e9b43b46e933e15d54c5ccfcedcda6
- SHA512 16c1f4c2a9990def3b64dbe9b77a62694a34ce036e666870cd324cb8b095ee17ea876d1e0e83b4442e45e08c009708103a3397a705320eae5399df4b9d0af26e
- SSDEEP 196608:Tpdyn8OyJgV9z8bdsosEU8IBtz/WyZ/K0ttYVAATm60Jo3:FdyndVosEU8IBJuyZ/K0ttYZThx3
- TLSH T165D69E13F2A402F5D0B7D178CA629222EB727C5547B196CF2294B6E81F73AD06F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-03_6c91c30e3c154c69b5f347371eed692d_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_6c91c30e3c154c69b5f347371eed692d_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_stealc_vidar_wannacry
- Size 12.4MB
- SHA256 8a17686dbab9e92eea477c5b8f3d1f2b79533a5dfb8eef098af19d7717bad823
- MD5 6c91c30e3c154c69b5f347371eed692d
- SHA1 e5372e7493e9b43b46e933e15d54c5ccfcedcda6
- SHA512 16c1f4c2a9990def3b64dbe9b77a62694a34ce036e666870cd324cb8b095ee17ea876d1e0e83b4442e45e08c009708103a3397a705320eae5399df4b9d0af26e
- SSDEEP 196608:Tpdyn8OyJgV9z8bdsosEU8IBtz/WyZ/K0ttYVAATm60Jo3:FdyndVosEU8IBJuyZ/K0ttYZThx3
- TLSH T165D69E13F2A402F5D0B7D178CA629222EB727C5547B196CF2294B6E81F73AD06F39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory