General
- Target 2026-08-24_aeabbd3cf00c6f226cec96634759da76_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 7.1MB
- Sample260825-es96vaek9v
- SHA256 5d4a74bc059781bd5df9bbedfffb29d4702b040cc47b3794fbf6f3e068d170ac
- MD5 aeabbd3cf00c6f226cec96634759da76
- SHA1 373d7373955b81e26fbd30b05abc53af859b1b75
- SHA512 b4b4f173be22f50e4c72f1b2bca31b68eb9f348b9b85b85c6f0baf85c5171a061dfe2210a5c226a3e5fbc17d3385ffd4252488da82c977e93d900f48238e502b
- SSDEEP 49152:SpPZuyWSG+BBvGvnjOyYVGlqRONsIqJtb2IwVBXdcVJDp5tPji0AjLWNNx3K7U6y:ShpBinjOykGcIDdWzNjouIo6qSjoGjoN
- TLSH T1E4767C12B654037AD0A3C0B4C6E75756DA70349A1730E6DF6288F7393E63BE25E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_aeabbd3cf00c6f226cec96634759da76_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_aeabbd3cf00c6f226cec96634759da76_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 7.1MB
- SHA256 5d4a74bc059781bd5df9bbedfffb29d4702b040cc47b3794fbf6f3e068d170ac
- MD5 aeabbd3cf00c6f226cec96634759da76
- SHA1 373d7373955b81e26fbd30b05abc53af859b1b75
- SHA512 b4b4f173be22f50e4c72f1b2bca31b68eb9f348b9b85b85c6f0baf85c5171a061dfe2210a5c226a3e5fbc17d3385ffd4252488da82c977e93d900f48238e502b
- SSDEEP 49152:SpPZuyWSG+BBvGvnjOyYVGlqRONsIqJtb2IwVBXdcVJDp5tPji0AjLWNNx3K7U6y:ShpBinjOykGcIDdWzNjouIo6qSjoGjoN
- TLSH T1E4767C12B654037AD0A3C0B4C6E75756DA70349A1730E6DF6288F7393E63BE25E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory