General
- Target 2026-08-19_c9c0e12e1924ff1511f23a8956807711_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 13.3MB
- Sample260820-btxqcsxfjc
- SHA256 97e0eb0a96abbda7da6cb02cbccebc4d900e5774b2f59cfb4637878ed80dba5a
- MD5 c9c0e12e1924ff1511f23a8956807711
- SHA1 86cc122520bb38eef060f6e05f22f8027908704b
- SHA512 69493968bfe9491f0e1ed0800996b3234b4c0185e3aa16bbd51cf8950bcabcdb4297db3eaceef166258f392e388909dbc6b45d8f769fd435477945ff8cbe3d7d
- SSDEEP 196608:TpAnjOynBdAWyZ/K0ttYVAATBoeWyZ/K0ttYVAATlob:FAnPyZ/K0ttYZT+ZyZ/K0ttYZT6b
- TLSH T17EE67C03F2E442A9E0A6D178CA769721DB727C594BF1A5DF324072D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_c9c0e12e1924ff1511f23a8956807711_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_c9c0e12e1924ff1511f23a8956807711_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 13.3MB
- SHA256 97e0eb0a96abbda7da6cb02cbccebc4d900e5774b2f59cfb4637878ed80dba5a
- MD5 c9c0e12e1924ff1511f23a8956807711
- SHA1 86cc122520bb38eef060f6e05f22f8027908704b
- SHA512 69493968bfe9491f0e1ed0800996b3234b4c0185e3aa16bbd51cf8950bcabcdb4297db3eaceef166258f392e388909dbc6b45d8f769fd435477945ff8cbe3d7d
- SSDEEP 196608:TpAnjOynBdAWyZ/K0ttYVAATBoeWyZ/K0ttYVAATlob:FAnPyZ/K0ttYZT+ZyZ/K0ttYZT6b
- TLSH T17EE67C03F2E442A9E0A6D178CA769721DB727C594BF1A5DF324072D92E33AD07B39721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory