General
- Target 2026-08-25_8a86aa724ddaee5dc5f5526484a64051_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar_wannacry
- Size 7.8MB
- Sample260826-wv6d4stfjb
- SHA256 57caff111d29dccab0a9006e3c275326b332293ddf447c75340a0fb63bcfb012
- MD5 8a86aa724ddaee5dc5f5526484a64051
- SHA1 2dc774fa549bfff27531c739453842804960b5c9
- SHA512 5f2de56329234f93a14ebe85b43fc8af9156f5c754fed0831a2135cc5e9d32a6363503d619d2e94727295d280e07bd60373f1dd2c42fbb2912e3fe00fe35eb79
- SSDEEP 98304:lhpBv4Yan8Oyk+Xws+wE9XD8VBDd/0oAaldmdmnpdjo8RIdsDQ3:Tpdyn8OyJgV9z8bd8Kmd07o8OdsM3
- TLSH T1E2869E12F29446B5D0A3C175CEA69261EB713C5907F192DF2384B7E92E33AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-25_8a86aa724ddaee5dc5f5526484a64051_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_h.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_8a86aa724ddaee5dc5f5526484a64051_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_hijackloader_icedid_njrat_rhadamanthys_smoke-loader_vidar_wannacry
- Size 7.8MB
- SHA256 57caff111d29dccab0a9006e3c275326b332293ddf447c75340a0fb63bcfb012
- MD5 8a86aa724ddaee5dc5f5526484a64051
- SHA1 2dc774fa549bfff27531c739453842804960b5c9
- SHA512 5f2de56329234f93a14ebe85b43fc8af9156f5c754fed0831a2135cc5e9d32a6363503d619d2e94727295d280e07bd60373f1dd2c42fbb2912e3fe00fe35eb79
- SSDEEP 98304:lhpBv4Yan8Oyk+Xws+wE9XD8VBDd/0oAaldmdmnpdjo8RIdsDQ3:Tpdyn8OyJgV9z8bd8Kmd07o8OdsM3
- TLSH T1E2869E12F29446B5D0A3C175CEA69261EB713C5907F192DF2384B7E92E33AD07B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory