General
- Target 2026-08-17_f9514c6c8ead30da4ba730e433f1a90c_amadey_cobalt-strike_coinminer_elex_glassworm_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 17.3MB
- Sample260817-v1chjsvgqc
- SHA256 fef84970c5c0099b8b3dbaa7d4e2b52afa382ce249e7a07a025eaa25f434787b
- MD5 f9514c6c8ead30da4ba730e433f1a90c
- SHA1 c696870b8845db175601441f54be9ac63975dfbc
- SHA512 3a4b504c656d7b22751981d3bdbb036995eac885cd15529268dfa43bbba26f7fea3738915ed6401980e772a32fcea7a9e4f3bd220e0046778405fe9fb68822f6
- SSDEEP 196608:1M1E0PDmSsdBnSKNsTnnm5ByrIebz/Hjh9D7563JzxmvHoxmHuNKk/MGUb:szDmTdZSKeTnneKDh9Do3lxHMo8
- TLSH T14007E142A3DA4BA6C8386C79484306F662B63E98CB494F77F5CCD5941EE7D903D21BC2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-17_f9514c6c8ead30da4ba730e433f1a90c_amadey_cobalt-strike_coinminer_elex_glassworm_icedid_njr.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_f9514c6c8ead30da4ba730e433f1a90c_amadey_cobalt-strike_coinminer_elex_glassworm_icedid_njrat_remcos_smoke-loader_stop_vidar
- Size 17.3MB
- SHA256 fef84970c5c0099b8b3dbaa7d4e2b52afa382ce249e7a07a025eaa25f434787b
- MD5 f9514c6c8ead30da4ba730e433f1a90c
- SHA1 c696870b8845db175601441f54be9ac63975dfbc
- SHA512 3a4b504c656d7b22751981d3bdbb036995eac885cd15529268dfa43bbba26f7fea3738915ed6401980e772a32fcea7a9e4f3bd220e0046778405fe9fb68822f6
- SSDEEP 196608:1M1E0PDmSsdBnSKNsTnnm5ByrIebz/Hjh9D7563JzxmvHoxmHuNKk/MGUb:szDmTdZSKeTnneKDh9Do3lxHMo8
- TLSH T14007E142A3DA4BA6C8386C79484306F662B63E98CB494F77F5CCD5941EE7D903D21BC2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
UPX dump on OEP (original entry point)