General
- Target 2026-09-30_ab52eac6c6cfc3a88e7e639be7bc8e6a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_nymaim_ramnit_rhadamanthys_smoke-loader_stop_vidar_wannacry
- Size 9.5MB
- Sample260930-knlwcazyex
- SHA256 c578f21e6a086530e868f0e2b8c7cf4aebdead914a0b7c526f0542d3eff0b21b
- MD5 ab52eac6c6cfc3a88e7e639be7bc8e6a
- SHA1 6d6412fb79a7d8d0c1a69935f92a38ec9aff3f0d
- SHA512 88e91171ac41fb23ceffac3a58424e34c82e15bbba93cf2c9ed2070f6603f7ae1929bc678c4ac1127392faf4d833162795efeff18e157f2f55ffb593fd46166e
- SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfWGLsRoq2Vjnm7+d8MUSXIYa3Y4zG:nIcRGBfW1GBfWnGnQEU8IBtzG
- TLSH T13FA68B0263A440E6D0B6A274C46A67269371BE741F32D7EF6A54761E7F33BC04D3A362
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_ab52eac6c6cfc3a88e7e639be7bc8e6a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hij.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_ab52eac6c6cfc3a88e7e639be7bc8e6a_amadey_cobalt-strike_coinminer_elex_emotet_glassworm_hijackloader_nymaim_ramnit_rhadamanthys_smoke-loader_stop_vidar_wannacry
- Size 9.5MB
- SHA256 c578f21e6a086530e868f0e2b8c7cf4aebdead914a0b7c526f0542d3eff0b21b
- MD5 ab52eac6c6cfc3a88e7e639be7bc8e6a
- SHA1 6d6412fb79a7d8d0c1a69935f92a38ec9aff3f0d
- SHA512 88e91171ac41fb23ceffac3a58424e34c82e15bbba93cf2c9ed2070f6603f7ae1929bc678c4ac1127392faf4d833162795efeff18e157f2f55ffb593fd46166e
- SSDEEP 98304:CdYOXwnS4rVR5v77GBfWx77GBfWGLsRoq2Vjnm7+d8MUSXIYa3Y4zG:nIcRGBfW1GBfWnGnQEU8IBtzG
- TLSH T13FA68B0263A440E6D0B6A274C46A67269371BE741F32D7EF6A54761E7F33BC04D3A362
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1