General
- Target 2026-09-10_21994ad5cd0446a1da85f84ecd78475f_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_luca-stealer_memery_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 17.7MB
- Sample260910-xrzmtsvbrc
- SHA256 706a268847d7cff094ce918fb79ce6ac892b9cf376b9c85e5fd8e4a7974ce599
- MD5 21994ad5cd0446a1da85f84ecd78475f
- SHA1 e8a0b43ccad764867b390ba5a519b2d4ace4ff4e
- SHA512 05ecc914d8b2c9b9967262ba9f23c1bd5f0392cf5e08538c0b704058fb47679c27a49c58a4bc3b815c7ab1bc12360982a0c6b853679a6c392c853608e9159687
- SSDEEP 393216:l+JhllNUHGcgUVluK7aMIbUwF1VERmj2b:616HvfVlu4nIY092b
- TLSH T11017E000F6C34071ECA3153099AEA22E0629AD12472CDBD7F54CBAE9EF326F1D974756
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-10_21994ad5cd0446a1da85f84ecd78475f_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_l.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_21994ad5cd0446a1da85f84ecd78475f_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_luca-stealer_memery_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 17.7MB
- SHA256 706a268847d7cff094ce918fb79ce6ac892b9cf376b9c85e5fd8e4a7974ce599
- MD5 21994ad5cd0446a1da85f84ecd78475f
- SHA1 e8a0b43ccad764867b390ba5a519b2d4ace4ff4e
- SHA512 05ecc914d8b2c9b9967262ba9f23c1bd5f0392cf5e08538c0b704058fb47679c27a49c58a4bc3b815c7ab1bc12360982a0c6b853679a6c392c853608e9159687
- SSDEEP 393216:l+JhllNUHGcgUVluK7aMIbUwF1VERmj2b:616HvfVlu4nIY092b
- TLSH T11017E000F6C34071ECA3153099AEA22E0629AD12472CDBD7F54CBAE9EF326F1D974756
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory