General
- Target 2026-08-15_77c0e1ad148a224983a066b21fa7108d_akira_amadey_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_pos_remcos_satacom_vidar
- Size 49.5MB
- Sample260815-d8av9adf66
- SHA256 3fd453a24458c63687029d0d320a44a8c91ceb7e6ddb0de0d9b30b3ed6874dd9
- MD5 77c0e1ad148a224983a066b21fa7108d
- SHA1 5afd1cdf8c55895b7b7e658db722daae9ab65958
- SHA512 ff72581f400e03f95506aecb92ee6f7936596d1d7d400b4c4090dd5698a6fae97d6ca0b1dfabbf3945d79e19b43ce62ea684c36be762e63fdffee1499f3edce5
- SSDEEP 786432:JaLHV+/9uqlRqjt2KaqUz4qdimdz+DZv0uD:JaLHVyl4jApqUz4qJdz+N
- TLSH T177B77C4276E048A1C0B7E235C7574A42E7B2BC096B22D7DB319CB3692F376D15E3A319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-15_77c0e1ad148a224983a066b21fa7108d_akira_amadey_cobalt-strike_coinminer_glassworm_hijackloa.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_77c0e1ad148a224983a066b21fa7108d_akira_amadey_cobalt-strike_coinminer_glassworm_hijackloa.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_77c0e1ad148a224983a066b21fa7108d_akira_amadey_cobalt-strike_coinminer_glassworm_hijackloader_icedid_njrat_pos_remcos_satacom_vidar
- Size 49.5MB
- SHA256 3fd453a24458c63687029d0d320a44a8c91ceb7e6ddb0de0d9b30b3ed6874dd9
- MD5 77c0e1ad148a224983a066b21fa7108d
- SHA1 5afd1cdf8c55895b7b7e658db722daae9ab65958
- SHA512 ff72581f400e03f95506aecb92ee6f7936596d1d7d400b4c4090dd5698a6fae97d6ca0b1dfabbf3945d79e19b43ce62ea684c36be762e63fdffee1499f3edce5
- SSDEEP 786432:JaLHV+/9uqlRqjt2KaqUz4qdimdz+DZv0uD:JaLHVyl4jApqUz4qJdz+N
- TLSH T177B77C4276E048A1C0B7E235C7574A42E7B2BC096B22D7DB319CB3692F376D15E3A319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects encrypted or obfuscated .NET executables
-
Detects executables packed with Dotfuscator