General
- Target 2026-08-20_0b424d6cbec496d1da65b458278ceb3a_amadey_coinminer_dcrat_glassworm_icedid_poet-rat_quasar-rat_vidar
- Size 17.0MB
- Sample260821-bdcp9aej3v
- SHA256 abee6803390a30f43b0e6fd4a695b82f897c4cee0ac35c66b14f4192d13e03f2
- MD5 0b424d6cbec496d1da65b458278ceb3a
- SHA1 7b4554038d9717765d819841e221746ac276b31b
- SHA512 b2f91d62692194afaa577b3f9d51dc84becd997358fbaa2a2e3399c94592475bb0fb233710d77d06c93ac2330b97f1ade668292c1b855953964b7cbe5b485146
- SSDEEP 196608:fOzvuLHGsCmAP+625+PegyIzuotW4F6U35:fwG7RRAq5CBrtW4p35
- TLSH T1E8078C1273E58F62D16E9736D0A2411463F1F845B363D76FAA8D736E2C63BA18D02363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_0b424d6cbec496d1da65b458278ceb3a_amadey_coinminer_dcrat_glassworm_icedid_poet-rat_quasar-rat_vidar.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_0b424d6cbec496d1da65b458278ceb3a_amadey_coinminer_dcrat_glassworm_icedid_poet-rat_quasar-rat_vidar.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_0b424d6cbec496d1da65b458278ceb3a_amadey_coinminer_dcrat_glassworm_icedid_poet-rat_quasar-rat_vidar
- Size 17.0MB
- SHA256 abee6803390a30f43b0e6fd4a695b82f897c4cee0ac35c66b14f4192d13e03f2
- MD5 0b424d6cbec496d1da65b458278ceb3a
- SHA1 7b4554038d9717765d819841e221746ac276b31b
- SHA512 b2f91d62692194afaa577b3f9d51dc84becd997358fbaa2a2e3399c94592475bb0fb233710d77d06c93ac2330b97f1ade668292c1b855953964b7cbe5b485146
- SSDEEP 196608:fOzvuLHGsCmAP+625+PegyIzuotW4F6U35:fwG7RRAq5CBrtW4p35
- TLSH T1E8078C1273E58F62D16E9736D0A2411463F1F845B363D76FAA8D736E2C63BA18D02363
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.