General
- Target 2026-09-06_03ff73d2720986b9617076ca25363636_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_graphican_icedid_mars-stealer_smoke-loader_stealc_tofsee_vidar
- Size 299KB
- Sample260907-kkac5ssfqe
- SHA256 c44750f57756504886553b3c417a33745a0156372696959e4f39306a2a5b59d9
- MD5 03ff73d2720986b9617076ca25363636
- SHA1 38756c1a837b9823895d69d1603f339d2f873bad
- SHA512 f07ea1792e7a62179eeee810395e0cab3e857904324e38aa2c9a07239850c94009ecb9cfd72dad1f97d4908bfb837481353b5d4beaee68ce8d774ece0b391962
- SSDEEP 6144:i7Pi8WYtUokCulxMfpb7fefYSTFanE7w+Uw3NKR9hU/W9:YHtUoH3BfQxTF44wx8KRF9
- TLSH T12B546D32F65018BDE463417C95EE5F6ADB6A78320310CEDB53D006851FE22F5AD39A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-06_03ff73d2720986b9617076ca25363636_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_g.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_03ff73d2720986b9617076ca25363636_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_g.exe
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
default9_cap
C2
-
http://62.204.41.177
Attributes
-
url_path
/edd20096ecef326d.php
Targets
-
- Target 2026-09-06_03ff73d2720986b9617076ca25363636_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_graphican_icedid_mars-stealer_smoke-loader_stealc_tofsee_vidar
- Size 299KB
- SHA256 c44750f57756504886553b3c417a33745a0156372696959e4f39306a2a5b59d9
- MD5 03ff73d2720986b9617076ca25363636
- SHA1 38756c1a837b9823895d69d1603f339d2f873bad
- SHA512 f07ea1792e7a62179eeee810395e0cab3e857904324e38aa2c9a07239850c94009ecb9cfd72dad1f97d4908bfb837481353b5d4beaee68ce8d774ece0b391962
- SSDEEP 6144:i7Pi8WYtUokCulxMfpb7fefYSTFanE7w+Uw3NKR9hU/W9:YHtUoH3BfQxTF44wx8KRF9
- TLSH T12B546D32F65018BDE463417C95EE5F6ADB6A78320310CEDB53D006851FE22F5AD39A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10