2026-08-22_0665dea4dcaa7eab82b14b46feb7387e_amadey_cobalt-strike_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_poet-rat_remcos_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-22_0665dea4dcaa7eab82b14b46feb7387e_amadey_cobalt-strike_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_poet-rat_remcos_smoke-loader
Size 3.9MB
Sample260823-qhrgjaxbme
SHA256 c567f2b67d485fe319a9599b6a7a80d9d24e2646dc8bf6457b4e2b839a0d79a3
MD5 0665dea4dcaa7eab82b14b46feb7387e
SHA1 ca53dc5b050ee4b5775ed41ccb85bbc893852b25
SHA512 dbb8f8b7691663c46ae081aa83268a1b776b36ddab83b298e60ef317a8dc32340c9ff6ffaea3207c6c0933769dc9929e96d10642f869394275922891833b7c58
SSDEEP 49152:F0ktHFMh6zvqnvs0+v+O57c+DVzqQ+U5WV8S7IcwVRRjFTE96J4nACYd02Ul+:ysTP7c+DNE/l6RROQ+
TLSH
T161168D60FDDB50F9EA03183145ABA27FA33467195335CBC7C7401E9AE86BAE15D33229
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-22_0665dea4dcaa7eab82b14b46feb7387e_amadey_cobalt-strike_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_poet-rat_remcos_smoke-loader

File Explorer

2026-08-22_0665dea4dcaa7eab82b14b46feb7387e_amadey_cobalt-strike_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_poet-rat_remcos_smoke-loader

.exe 3.9MB

2026-08-22_0665dea4dcaa7eab82b14b46feb7387e_amadey_cobalt-strike_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_poet-rat_remcos_smoke-loader

IMPHASH ac85d85b1b04f75921f1ad8ef27f8e95
SHA256 c567f2b67d485fe319a9599b6a7a80d9d24e2646dc8bf6457b4e2b839a0d79a3
MD5 0665dea4dcaa7eab82b14b46feb7387e
SHA1 ca53dc5b050ee4b5775ed41ccb85bbc893852b25
SHA512 dbb8f8b7691663c46ae081aa83268a1b776b36ddab83b298e60ef317a8dc32340c9ff6ffaea3207c6c0933769dc9929e96d10642f869394275922891833b7c58
SSDEEP 49152:F0ktHFMh6zvqnvs0+v+O57c+DVzqQ+U5WV8S7IcwVRRjFTE96J4nACYd02Ul+:ysTP7c+DNE/l6RROQ+
TLSH
T161168D60FDDB50F9EA03183145ABA27FA33467195335CBC7C7401E9AE86BAE15D33229
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

207340

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ws2_32

gethostbyname WSAStartup WSACleanup inet_ntoa

shell32

SHGetSpecialFolderPathW

ole32

CoUninitialize CoInitialize

advapi32

RegOpenKeyExW RegCloseKey RegSetValueExW

user32

ShowWindow

kernel32

WriteConsoleW SetStdHandle ReadConsoleW OutputDebugStringA SetEnvironmentVariableW SetEnvironmentVariableA CreateFileW HeapSize OutputDebugStringW WaitForSingleObjectEx FreeEnvironmentStringsW GetEnvironmentStringsW GetProcAddress VirtualAlloc VirtualAllocEx TerminateProcess GetExitCodeProcess CreateThread GetLastError ReadProcessMemory WriteProcessMemory GetThreadContext SetThreadContext Wow64GetThreadContext ResumeThread InitializeCriticalSection EnterCriticalSection LeaveCriticalSection Sleep GetTickCount GetModuleFileNameW GetModuleHandleA CreateProcessW SetCurrentDirectoryW CreateDirectoryW GetConsoleWindow FormatMessageW WideCharToMultiByte DeleteCriticalSection MultiByteToWideChar EncodePointer DecodePointer SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo CloseHandle SetEvent ResetEvent SetEndOfFile IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead GetCurrentProcess RaiseException RtlUnwind FreeLibrary LoadLibraryExW InterlockedPushEntrySList InterlockedFlushSList HeapAlloc HeapFree HeapReAlloc ExitProcess GetModuleHandleExW GetModuleFileNameA GetStdHandle WriteFile GetCommandLineA GetCommandLineW GetACP GetCurrentThread GetFileType GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx GetProcessHeap SetConsoleCtrlHandler GetTimeZoneInformation FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW IsValidCodePage GetOEMCP

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-22_0665dea4dcaa7eab82b14b46feb7387e_amadey_cobalt-strike_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_poet-rat_remcos_smoke-loader

ws2_32

shell32

ole32

advapi32

user32

kernel32

generic