General
- Target 2026-08-23_bbc9f2fa1b28035b9ddc268af5a651f9_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 6.6MB
- Sample260825-18rkbszbrf
- SHA256 17096db0cd96f31d6595d0986a91e216c6fb92c81479d711b5a20b0d9ecb0eff
- MD5 bbc9f2fa1b28035b9ddc268af5a651f9
- SHA1 2c1bec03df67c2adc9de1e1f660e7592ac1731ea
- SHA512 e392a21a09dabdf960eb5481bbf805142d689895ef0840000567a08ddfab370d6e4e0e41ae42d0eb8121a5aa279d0faf614852305c76bd1b2654d2405c6aa145
- SSDEEP 49152:lpPZuyWSG+BBvGvnjOyYVGlqRONsIqJtb2IwVBXdcVJDp5tPji0AjLWNNx3K7U6a:lhpBinjOykGcIDdWzNjouIo6qSjo1
- TLSH T119668C12B654027AD0A3C0B4C2A757569A7034A91730E6EF6388F7393F63BE15F3A761
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-23_bbc9f2fa1b28035b9ddc268af5a651f9_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_bbc9f2fa1b28035b9ddc268af5a651f9_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 6.6MB
- SHA256 17096db0cd96f31d6595d0986a91e216c6fb92c81479d711b5a20b0d9ecb0eff
- MD5 bbc9f2fa1b28035b9ddc268af5a651f9
- SHA1 2c1bec03df67c2adc9de1e1f660e7592ac1731ea
- SHA512 e392a21a09dabdf960eb5481bbf805142d689895ef0840000567a08ddfab370d6e4e0e41ae42d0eb8121a5aa279d0faf614852305c76bd1b2654d2405c6aa145
- SSDEEP 49152:lpPZuyWSG+BBvGvnjOyYVGlqRONsIqJtb2IwVBXdcVJDp5tPji0AjLWNNx3K7U6a:lhpBinjOykGcIDdWzNjouIo6qSjo1
- TLSH T119668C12B654027AD0A3C0B4C2A757569A7034A91730E6EF6388F7393F63BE15F3A761
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory