General
- Target 2026-08-30_67610e252a70d56f900bdc06c16f6c8a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_remcos_smoke-loader_stop_vidar
- Size 3.4MB
- Sample260831-mb5tssstez
- SHA256 acd14611f1f4626bbd0e82d83e87fc28618cf9200aac9e14c1cc1ee2c8a03885
- MD5 67610e252a70d56f900bdc06c16f6c8a
- SHA1 c609f92d91d83b9b0fcfe648ab00ec69162729cb
- SHA512 2ae66d7084cc8af9186076cf08d4fc5681be5b75a232f224fc79e5ff7e1b358b16f466a03d8cac274aaa6924cb07e71e7b8b1acf6e5df7f7070679e93a3a6ff9
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHkJEM/rn/4MnYYJ2ZhqRJWpYqXqatglrimz56rX:TIDQ/rw8RU6w+yrX
- TLSH T1DCF55902A3534672DC2761308466665997327E709F238FCB6B407EADBFB27C15A32376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-30_67610e252a70d56f900bdc06c16f6c8a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-30_67610e252a70d56f900bdc06c16f6c8a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_67610e252a70d56f900bdc06c16f6c8a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_icedid_remcos_smoke-loader_stop_vidar
- Size 3.4MB
- SHA256 acd14611f1f4626bbd0e82d83e87fc28618cf9200aac9e14c1cc1ee2c8a03885
- MD5 67610e252a70d56f900bdc06c16f6c8a
- SHA1 c609f92d91d83b9b0fcfe648ab00ec69162729cb
- SHA512 2ae66d7084cc8af9186076cf08d4fc5681be5b75a232f224fc79e5ff7e1b358b16f466a03d8cac274aaa6924cb07e71e7b8b1acf6e5df7f7070679e93a3a6ff9
- SSDEEP 49152:W/4MnYYJ2ZhqSGLHkJEM/rn/4MnYYJ2ZhqRJWpYqXqatglrimz56rX:TIDQ/rw8RU6w+yrX
- TLSH T1DCF55902A3534672DC2761308466665997327E709F238FCB6B407EADBFB27C15A32376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory