General
- Target 2026-08-27_f42894b138671cf7096d86eb7e81aec9_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_njrat_poet-rat_vidar
- Size 22.4MB
- Sample260828-b17txaem2v
- SHA256 72efa1d9fc208063f6d34431afaf433e048015646dfc4575273124eff3bc8a10
- MD5 f42894b138671cf7096d86eb7e81aec9
- SHA1 b9591f70af6597186e67c67fe2ab81f52b0fa11a
- SHA512 220f395631f49e47524f28f3ae01abb17cf53d2e300ab63a46d8a65fe10d69d7439ca2bb94e571231e98bf9dda0bf8b179134fbdf40c3e73b4a35b7e9f8e1562
- SSDEEP 196608:pHh6ImzD+F0mHpn6F44IAWv+1tIDewjqkjiqMx:kLmHN6+Jrv+8Kwekyx
- TLSH T1BC378E29A6EA40F8E56BD53489778336E6317C12073293CF86A4C62EAF336D15D35732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_f42894b138671cf7096d86eb7e81aec9_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_i.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_f42894b138671cf7096d86eb7e81aec9_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_i.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_f42894b138671cf7096d86eb7e81aec9_amadey_cobalt-strike_coinminer_cryptbot_elex_glassworm_icedid_njrat_poet-rat_vidar
- Size 22.4MB
- SHA256 72efa1d9fc208063f6d34431afaf433e048015646dfc4575273124eff3bc8a10
- MD5 f42894b138671cf7096d86eb7e81aec9
- SHA1 b9591f70af6597186e67c67fe2ab81f52b0fa11a
- SHA512 220f395631f49e47524f28f3ae01abb17cf53d2e300ab63a46d8a65fe10d69d7439ca2bb94e571231e98bf9dda0bf8b179134fbdf40c3e73b4a35b7e9f8e1562
- SSDEEP 196608:pHh6ImzD+F0mHpn6F44IAWv+1tIDewjqkjiqMx:kLmHN6+Jrv+8Kwekyx
- TLSH T1BC378E29A6EA40F8E56BD53489778336E6317C12073293CF86A4C62EAF336D15D35732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1