General
- Target 2026-08-07_ecf26a78852b7010f37e4750a0816d98_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 26.2MB
- Sample260808-ar78msem6x
- SHA256 5abe1ef50343f1eb0ce7eabe573348ea6e0d7191f565dbf642f279a143305741
- MD5 ecf26a78852b7010f37e4750a0816d98
- SHA1 22c93c837d700b50e45254fb28e4a83f15182dc0
- SHA512 1b5b7e49c0652c582e92fab3ada7852c78347175612d44e96ee1dcb58ab375733f18b47f5b74071802c1c1189fec7aaa6dbee5853654bf3040291c10d38fdf3b
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzL/h1+E8Vb618U68Vbb8Vb61l:2cD2cDIEU8IBJucD2cDIEU8IBJS
- TLSH T18A579E16F6A440F5D17AC534C5A69236EB72BC120B318BCB53A4F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_ecf26a78852b7010f37e4750a0816d98_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_ecf26a78852b7010f37e4750a0816d98_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_ecf26a78852b7010f37e4750a0816d98_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 26.2MB
- SHA256 5abe1ef50343f1eb0ce7eabe573348ea6e0d7191f565dbf642f279a143305741
- MD5 ecf26a78852b7010f37e4750a0816d98
- SHA1 22c93c837d700b50e45254fb28e4a83f15182dc0
- SHA512 1b5b7e49c0652c582e92fab3ada7852c78347175612d44e96ee1dcb58ab375733f18b47f5b74071802c1c1189fec7aaa6dbee5853654bf3040291c10d38fdf3b
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzL/h1+E8Vb618U68Vbb8Vb61l:2cD2cDIEU8IBJucD2cDIEU8IBJS
- TLSH T18A579E16F6A440F5D17AC534C5A69236EB72BC120B318BCB53A4F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application