General
- Target 2026-11-07_80d36497c006c87033678eedc86d3ff9_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_graphican_icedid_mars-stealer_smoke-loader_stealc_tofsee_vidar
- Size 2.3MB
- Sample261108-paebkabz41
- SHA256 e2e9405b4cbf771c44ddbc0bc5ef89a1187a12382c12851fb2df408cbd4f6f3c
- MD5 80d36497c006c87033678eedc86d3ff9
- SHA1 96ab2b3efaec9e95b29ce5e63083e1d336b0e37c
- SHA512 0c5ab7f8879708f4e6a665caf9de92f172ca635455450c0a260a6fd57482eb3646e04f49495bc1c587b676237cd6dd44b68e1ab27b198acb3df96f74044b4f1b
- SSDEEP 6144:VKPi8WYtUokCulxMfpb7fefY5eHzFanE7w+Uw3NKR9hU/i9:kHtUoH3BfQfHzF44wx8KRN9
- TLSH T122B56C32F65018BDE463417C95DE5F6ADB6A78320310CEDB53D00A851FE22F5AD39A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-07_80d36497c006c87033678eedc86d3ff9_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_g.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-07_80d36497c006c87033678eedc86d3ff9_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_g.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
stealc
Botnet
-
default5_cap
C2
-
http://62.204.41.159
Attributes
-
url_path
/edd20096ecef326d.php
Targets
-
- Target 2026-11-07_80d36497c006c87033678eedc86d3ff9_amadey_cobalt-strike_coinminer_darkgate_elex_glassworm_graphican_icedid_mars-stealer_smoke-loader_stealc_tofsee_vidar
- Size 2.3MB
- SHA256 e2e9405b4cbf771c44ddbc0bc5ef89a1187a12382c12851fb2df408cbd4f6f3c
- MD5 80d36497c006c87033678eedc86d3ff9
- SHA1 96ab2b3efaec9e95b29ce5e63083e1d336b0e37c
- SHA512 0c5ab7f8879708f4e6a665caf9de92f172ca635455450c0a260a6fd57482eb3646e04f49495bc1c587b676237cd6dd44b68e1ab27b198acb3df96f74044b4f1b
- SSDEEP 6144:VKPi8WYtUokCulxMfpb7fefY5eHzFanE7w+Uw3NKR9hU/i9:kHtUoH3BfQfHzF44wx8KRN9
- TLSH T122B56C32F65018BDE463417C95DE5F6ADB6A78320310CEDB53D00A851FE22F5AD39A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10