General
- Target 2026-08-15_564a59df394ef27be915c8434f5bdcde_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop_vidar
- Size 15.7MB
- Sample260815-navswav1c1
- SHA256 72b0fffc5ace2b895a6951afafacb2eac9974133c3e4074fe49f2567b3d93e48
- MD5 564a59df394ef27be915c8434f5bdcde
- SHA1 7f4ec8d1f933c7fd2382251fa876755d9cad2c0a
- SHA512 dcff6878ad0a056681766405747e18f4980053cb3a67250945a23988fc2496d87aa72ab5d86db3b8732cd5299a9bf1c4598f0b297e305c010cdbf7c054747705
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jo1MMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6m:ShwZi32PVTfYoFEU8IBtzvoMoS
- TLSH T1EDF63803BE6CDD6AF87E39B5C844C6759D283C191723659779E0BF6DA9332C13A28231
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_564a59df394ef27be915c8434f5bdcde_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_564a59df394ef27be915c8434f5bdcde_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_rhadamanthys_stop_vidar
- Size 15.7MB
- SHA256 72b0fffc5ace2b895a6951afafacb2eac9974133c3e4074fe49f2567b3d93e48
- MD5 564a59df394ef27be915c8434f5bdcde
- SHA1 7f4ec8d1f933c7fd2382251fa876755d9cad2c0a
- SHA512 dcff6878ad0a056681766405747e18f4980053cb3a67250945a23988fc2496d87aa72ab5d86db3b8732cd5299a9bf1c4598f0b297e305c010cdbf7c054747705
- SSDEEP 98304:OfkrRokxZaeUJF3noxDDu6/TIOSA6jo1MMHMMMvMMZMMMlmMMMiMMMYJMMHMMM6m:ShwZi32PVTfYoFEU8IBtzvoMoS
- TLSH T1EDF63803BE6CDD6AF87E39B5C844C6759D283C191723659779E0BF6DA9332C13A28231
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory