General
- Target 2026-08-24_97c3a6bf81bbcc338e3333042816e56e_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 5.5MB
- Sample260825-hrycfagb87
- SHA256 247fba1c264915da717bc491840826ceabdcaf7fca89dd37538622a0d2cb845a
- MD5 97c3a6bf81bbcc338e3333042816e56e
- SHA1 09f21020566946a38a748e3d0252f8dffcb8f2af
- SHA512 b22551902126bb30fa11931b5640ba0d88659ab377570958d871cf2211b6aad2bbba98e9ad39e2714fc5ff8a98483efb8191be7f5be0e21600e1b3b7441a0590
- SSDEEP 49152:kpPZuyWSG+BBvGvnjOyYVGlqRONszVBXdc/RJzVBXfqJtb2Ib+Cq99LyFpYqlVBV:khpBinjOykGcPdOR5fd46UdB6w
- TLSH T139469D16F2904276D0B3D079C5EA5755EA7134A91B30D3DB3388F2692E337D29A3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-24_97c3a6bf81bbcc338e3333042816e56e_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_97c3a6bf81bbcc338e3333042816e56e_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_97c3a6bf81bbcc338e3333042816e56e_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 5.5MB
- SHA256 247fba1c264915da717bc491840826ceabdcaf7fca89dd37538622a0d2cb845a
- MD5 97c3a6bf81bbcc338e3333042816e56e
- SHA1 09f21020566946a38a748e3d0252f8dffcb8f2af
- SHA512 b22551902126bb30fa11931b5640ba0d88659ab377570958d871cf2211b6aad2bbba98e9ad39e2714fc5ff8a98483efb8191be7f5be0e21600e1b3b7441a0590
- SSDEEP 49152:kpPZuyWSG+BBvGvnjOyYVGlqRONszVBXdc/RJzVBXfqJtb2Ib+Cq99LyFpYqlVBV:khpBinjOykGcPdOR5fd46UdB6w
- TLSH T139469D16F2904276D0B3D079C5EA5755EA7134A91B30D3DB3388F2692E337D29A3A732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory