General
- Target 2026-08-23_1017b44ee3c1cf093c47250c1c18905d_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar_wannacry
- Size 7.9MB
- Sample260824-vps16a1cre
- SHA256 fb475a70dcf28a3992cde3b33aeb2a7c6c6a725cc9e302ed4c89e46e5bfca4fc
- MD5 1017b44ee3c1cf093c47250c1c18905d
- SHA1 0a711fa34c9220af9beccc3c04d5ab0022eac8df
- SHA512 9391c4cf2dde2bd8e8a1a4c40e28967acce48f77afa06118b3fa234b591609a8b0f88b0d94c1f65ae78a177668eac0ecd20159a7b2b0ee39ee70a1e53cee14c3
- SSDEEP 98304:khpBv4Yan8Oyk+Xws+wE9XD8VBDd/0oAaldmdmnpdjo9joS4Dv:8pdyn8OyJgV9z8bd8Kmd07o5oS4L
- TLSH T166869E12F2A44375D0B3C075CAA29265EB713C5907B096DB2284B7EC3E77AD17B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-23_1017b44ee3c1cf093c47250c1c18905d_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_1017b44ee3c1cf093c47250c1c18905d_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_1017b44ee3c1cf093c47250c1c18905d_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar_wannacry
- Size 7.9MB
- SHA256 fb475a70dcf28a3992cde3b33aeb2a7c6c6a725cc9e302ed4c89e46e5bfca4fc
- MD5 1017b44ee3c1cf093c47250c1c18905d
- SHA1 0a711fa34c9220af9beccc3c04d5ab0022eac8df
- SHA512 9391c4cf2dde2bd8e8a1a4c40e28967acce48f77afa06118b3fa234b591609a8b0f88b0d94c1f65ae78a177668eac0ecd20159a7b2b0ee39ee70a1e53cee14c3
- SSDEEP 98304:khpBv4Yan8Oyk+Xws+wE9XD8VBDd/0oAaldmdmnpdjo9joS4Dv:8pdyn8OyJgV9z8bd8Kmd07o5oS4L
- TLSH T166869E12F2A44375D0B3C075CAA29265EB713C5907B096DB2284B7EC3E77AD17B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory