General
- Target 2026-08-24_5f31d086a6df76179c045abfce37345a_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 7.1MB
- Sample260825-pgbh9aha75
- SHA256 89d2904eba2eb2d6b117ed0dabc8edebba209f557f15eeb10eea48438392c7bf
- MD5 5f31d086a6df76179c045abfce37345a
- SHA1 54d98a81882d623a4a05f8efa26a72fc0aac62c0
- SHA512 ea6133225d64ee259ea5b06ca319840c2b46e3ee645e6fe8ef051a779b5c4c5a903604437c0433692d610da7eb172aec7577e7a95ab43d074500be604c655205
- SSDEEP 49152:lpPZuyWSG+BBvGvnjOyYVGlqRONsIqJtb2IwVBXdcVJDp5tPji0AjLWNNx3K7U64:lhpBinjOykGcIDdWzNjouIo6qSjo6Y
- TLSH T137768C11B654437AD0A3C0B4C2E75756DA70349A1B30E6DF6288F7393E63BE25E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_5f31d086a6df76179c045abfce37345a_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_5f31d086a6df76179c045abfce37345a_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 7.1MB
- SHA256 89d2904eba2eb2d6b117ed0dabc8edebba209f557f15eeb10eea48438392c7bf
- MD5 5f31d086a6df76179c045abfce37345a
- SHA1 54d98a81882d623a4a05f8efa26a72fc0aac62c0
- SHA512 ea6133225d64ee259ea5b06ca319840c2b46e3ee645e6fe8ef051a779b5c4c5a903604437c0433692d610da7eb172aec7577e7a95ab43d074500be604c655205
- SSDEEP 49152:lpPZuyWSG+BBvGvnjOyYVGlqRONsIqJtb2IwVBXdcVJDp5tPji0AjLWNNx3K7U64:lhpBinjOykGcIDdWzNjouIo6qSjo6Y
- TLSH T137768C11B654437AD0A3C0B4C2E75756DA70349A1B30E6DF6288F7393E63BE25E3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory