General
- Target 2026-08-07_21b79e28465e24b6b198ce8e9063a37d_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 26.2MB
- Sample260808-b6e13sxgjf
- SHA256 f911c96502839813b64180aaf2149827df9fea90d41cc113af9dc88e188aa0dc
- MD5 21b79e28465e24b6b198ce8e9063a37d
- SHA1 b9afd260b1211f3a243cee026d030d4ee590b641
- SHA512 29ad8587107ffdc54b4318e1770eea919ea0b0328e32eba3d36a600281b58fe4c4bd5ab00f48f98a30af09604c5ff80f9834bd210667edfea4542537e9d03641
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzL/h1+E8Vb618U68Vbb8Vb61n:2cD2cDIEU8IBJucD2cDIEU8IBJ6j
- TLSH T168579E16F6A440F5D17AC534C5A69236EB72BC120B318BCB53A4F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-07_21b79e28465e24b6b198ce8e9063a37d_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_21b79e28465e24b6b198ce8e9063a37d_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_21b79e28465e24b6b198ce8e9063a37d_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_stealc_vidar
- Size 26.2MB
- SHA256 f911c96502839813b64180aaf2149827df9fea90d41cc113af9dc88e188aa0dc
- MD5 21b79e28465e24b6b198ce8e9063a37d
- SHA1 b9afd260b1211f3a243cee026d030d4ee590b641
- SHA512 29ad8587107ffdc54b4318e1770eea919ea0b0328e32eba3d36a600281b58fe4c4bd5ab00f48f98a30af09604c5ff80f9834bd210667edfea4542537e9d03641
- SSDEEP 196608:l8Vb618U68Vbb8Vb618U68VbCcc6/h1+VEU8IBtzL/h1+E8Vb618U68Vbb8Vb61n:2cD2cDIEU8IBJucD2cDIEU8IBJ6j
- TLSH T168579E16F6A440F5D17AC534C5A69236EB72BC120B318BCB53A4F66D1F336D09E3A722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application