General
- Target 2026-08-18_ab7e62157365bbfa3c1e414a8bcfd87b_cobalt-strike_coinminer_elex_emotet_glassworm_icedid_poet-rat_remcos_wannacry
- Size 10.5MB
- Sample260818-26tscasdpe
- SHA256 c0885f8dac08723da0b4af4a24888cb4b129db8260ebdf5bcc2f0d8a093066e2
- MD5 ab7e62157365bbfa3c1e414a8bcfd87b
- SHA1 8acb4d001599d4cb10ea02f270ce6cc57dc0353c
- SHA512 9cc6d9bd416d0d37af7eb545e5d484fe2d2b4611579e6c801f816f235a0941f57c6c32f6c1897f9ee26b8f7104ebc709465914e200ed47f0e1879b41e7fde243
- SSDEEP 98304:KCqOK8ATjN0HWpNjmk48VCftOk3MMo0KnBHAmHLthAvvgp+A41Xdqf:VfArpNjZdUFM1fBHAeLYXgm1Xdq
- TLSH T1BFB67C60F9DB60F9FA03553054A7623F6730560A8B35CEC7D740EE96EC23AD15A3362A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-18_ab7e62157365bbfa3c1e414a8bcfd87b_cobalt-strike_coinminer_elex_emotet_glassworm_icedid_poet-rat_remcos_wannacry.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_ab7e62157365bbfa3c1e414a8bcfd87b_cobalt-strike_coinminer_elex_emotet_glassworm_icedid_poet-rat_remcos_wannacry.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_ab7e62157365bbfa3c1e414a8bcfd87b_cobalt-strike_coinminer_elex_emotet_glassworm_icedid_poet-rat_remcos_wannacry
- Size 10.5MB
- SHA256 c0885f8dac08723da0b4af4a24888cb4b129db8260ebdf5bcc2f0d8a093066e2
- MD5 ab7e62157365bbfa3c1e414a8bcfd87b
- SHA1 8acb4d001599d4cb10ea02f270ce6cc57dc0353c
- SHA512 9cc6d9bd416d0d37af7eb545e5d484fe2d2b4611579e6c801f816f235a0941f57c6c32f6c1897f9ee26b8f7104ebc709465914e200ed47f0e1879b41e7fde243
- SSDEEP 98304:KCqOK8ATjN0HWpNjmk48VCftOk3MMo0KnBHAmHLthAvvgp+A41Xdqf:VfArpNjZdUFM1fBHAeLYXgm1Xdq
- TLSH T1BFB67C60F9DB60F9FA03553054A7623F6730560A8B35CEC7D740EE96EC23AD15A3362A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.