General
- Target 2026-08-07_3703e266203fb5d5c284a9678c81db5f_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_stealc_vidar_wannacry
- Size 8.9MB
- Sample260808-by26msxenf
- SHA256 1f1432e4be84ce8098db3e25db21eb0414ef7360bb0d496a1c723b1ecb9f85c5
- MD5 3703e266203fb5d5c284a9678c81db5f
- SHA1 67d14458822f0e3f67ac5ae3b41348b53e364fed
- SHA512 b2bbdc35e17b825834aa5df993534ea2ccfff1e65d4e3bfde4132963e4e06d8f39da8645903018c0e0e81023717c3f48728fec7abd31b5af5ef7eda04c1ad157
- SSDEEP 98304:vak1LapIJ6AdA+d8MUSXIYa3Y4zDTIOSA9:vD1cIJ6AdAEU8IBtzDTfZ
- TLSH T1D5966C2272E404E5E1AA9139CA614636D3B17C2A8BF2C3CF3554B5DA1E737C17E3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_3703e266203fb5d5c284a9678c81db5f_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_3703e266203fb5d5c284a9678c81db5f_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_stealc_vidar_wannacry
- Size 8.9MB
- SHA256 1f1432e4be84ce8098db3e25db21eb0414ef7360bb0d496a1c723b1ecb9f85c5
- MD5 3703e266203fb5d5c284a9678c81db5f
- SHA1 67d14458822f0e3f67ac5ae3b41348b53e364fed
- SHA512 b2bbdc35e17b825834aa5df993534ea2ccfff1e65d4e3bfde4132963e4e06d8f39da8645903018c0e0e81023717c3f48728fec7abd31b5af5ef7eda04c1ad157
- SSDEEP 98304:vak1LapIJ6AdA+d8MUSXIYa3Y4zDTIOSA9:vD1cIJ6AdAEU8IBtzDTfZ
- TLSH T1D5966C2272E404E5E1AA9139CA614636D3B17C2A8BF2C3CF3554B5DA1E737C17E3A712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory