General
- Target 2026-08-13_82e62f0ba53d0c8b7a06d1fc9227ca4d_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat
- Size 10.5MB
- Sample260813-e2lvlsbk3z
- SHA256 e79a869c82377d337d33baf2ea79f7290c20ff4d1f17ef6f13a49a59c2fa89db
- MD5 82e62f0ba53d0c8b7a06d1fc9227ca4d
- SHA1 e2bdad358231bd4439ff66ed27aa66076d50b309
- SHA512 80bede0b56a0925d16783e5ad4ad1e5722957769df4fed901ddbfee852eb337ccd248cbc65a08c1c527160d0604f10beedd2ac2d876a1226c310d7ecb1557a40
- SSDEEP 49152:U+ES+E2+ES+ES+Epr+ES+Epc+ES+E2+ES+ES+Epr+ES+Epc+ES+E2+ES+ES+EprD:d/fh6ImzzJoDfuBcMv+A73XAG
- TLSH T113B66B05F98740B1E91755B00CDBE3BF8630BA158722CEE7EB488B5BF923BE15835616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_82e62f0ba53d0c8b7a06d1fc9227ca4d_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_82e62f0ba53d0c8b7a06d1fc9227ca4d_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_82e62f0ba53d0c8b7a06d1fc9227ca4d_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_poet-rat
- Size 10.5MB
- SHA256 e79a869c82377d337d33baf2ea79f7290c20ff4d1f17ef6f13a49a59c2fa89db
- MD5 82e62f0ba53d0c8b7a06d1fc9227ca4d
- SHA1 e2bdad358231bd4439ff66ed27aa66076d50b309
- SHA512 80bede0b56a0925d16783e5ad4ad1e5722957769df4fed901ddbfee852eb337ccd248cbc65a08c1c527160d0604f10beedd2ac2d876a1226c310d7ecb1557a40
- SSDEEP 49152:U+ES+E2+ES+ES+Epr+ES+Epc+ES+E2+ES+ES+Epr+ES+Epc+ES+E2+ES+ES+EprD:d/fh6ImzzJoDfuBcMv+A73XAG
- TLSH T113B66B05F98740B1E91755B00CDBE3BF8630BA158722CEE7EB488B5BF923BE15835616
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1