General
- Target 2026-09-07_02213cb8497ecf09eeeb83f04f1c104b_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 9.8MB
- Sample260909-j384rabf47
- SHA256 7f8227e3ab08bac31ec5ecf1ecaad511c6153d376b89e4e1dd249723456c8bcd
- MD5 02213cb8497ecf09eeeb83f04f1c104b
- SHA1 3f191ce242b6ae7e87ff01ac3872cd9ff6d864d2
- SHA512 79a12d83e18a50d22f038eb951df7efb947cf78b9ff1818c04d8dafe60dacb4706a9a5acb26e931196bd3b9a0148760d2ae2c8c4d3b70f7cd470011b4cff8e5c
- SSDEEP 98304:khpBinjOykGcIy6fnUm8UdjoG0oAaldmdmnpT6dnUm8UTT:8pAnjOyny6f18UZorKmd0V6d18UTT
- TLSH T1C1A68D12F29442B6D066C075CA969365EB313C590BB1D6EF3280B7D92E33BD17B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-07_02213cb8497ecf09eeeb83f04f1c104b_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_02213cb8497ecf09eeeb83f04f1c104b_amadey_cobalt-strike_coinminer_elex_glassworm_hijackload.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_02213cb8497ecf09eeeb83f04f1c104b_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_njrat_redline-stealer_rhadamanthys_vidar_wannacry
- Size 9.8MB
- SHA256 7f8227e3ab08bac31ec5ecf1ecaad511c6153d376b89e4e1dd249723456c8bcd
- MD5 02213cb8497ecf09eeeb83f04f1c104b
- SHA1 3f191ce242b6ae7e87ff01ac3872cd9ff6d864d2
- SHA512 79a12d83e18a50d22f038eb951df7efb947cf78b9ff1818c04d8dafe60dacb4706a9a5acb26e931196bd3b9a0148760d2ae2c8c4d3b70f7cd470011b4cff8e5c
- SSDEEP 98304:khpBinjOykGcIy6fnUm8UdjoG0oAaldmdmnpT6dnUm8UTT:8pAnjOyny6f18UZorKmd0V6d18UTT
- TLSH T1C1A68D12F29442B6D066C075CA969365EB313C590BB1D6EF3280B7D92E33BD17B3A721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory