General
- Target 2026-08-15_38478f4969aed562837d16bce7ad37ef_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 9.6MB
- Sample260815-nfb8qavdnb
- SHA256 0f556afb13ceb96f04a44113cf631a4fc31165701f4a4f582e4a7e3bde566f4c
- MD5 38478f4969aed562837d16bce7ad37ef
- SHA1 d99f5c7ff2fe4aaed0af35078af1bfb3a9234f67
- SHA512 7444c1be2dcf046425fbc0c8ad9eab4a77b3895f8fa0d13059b5c95079e898ed3c2c703269bc29401ec6ad147ff46499ce9a5173c48db9ed8fc14a8149d7de12
- SSDEEP 98304:khpBinjOykGcIy6fnUm8UdjoG0oAaldmdmnpT6dnUm8U/66:8pAnjOyny6f18UZorKmd0V6d18U/66
- TLSH T1C5A68D12F29442B6D062C075CA969365EB713C590BB1D6EF3280B7D92E33BD17B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-15_38478f4969aed562837d16bce7ad37ef_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_38478f4969aed562837d16bce7ad37ef_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_38478f4969aed562837d16bce7ad37ef_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 9.6MB
- SHA256 0f556afb13ceb96f04a44113cf631a4fc31165701f4a4f582e4a7e3bde566f4c
- MD5 38478f4969aed562837d16bce7ad37ef
- SHA1 d99f5c7ff2fe4aaed0af35078af1bfb3a9234f67
- SHA512 7444c1be2dcf046425fbc0c8ad9eab4a77b3895f8fa0d13059b5c95079e898ed3c2c703269bc29401ec6ad147ff46499ce9a5173c48db9ed8fc14a8149d7de12
- SSDEEP 98304:khpBinjOykGcIy6fnUm8UdjoG0oAaldmdmnpT6dnUm8U/66:8pAnjOyny6f18UZorKmd0V6d18U/66
- TLSH T1C5A68D12F29442B6D062C075CA969365EB713C590BB1D6EF3280B7D92E33BD17B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory