General
- Target 2026-04-25_37941ccc8ba027b475fd2eff9a511b25_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 8.1MB
- Sample260425-tk1d1ads2t
- SHA256 7953ffe8013118500d2f1c476c8c3d2b105c5ad263c8bfffad9ffabde50e3619
- MD5 37941ccc8ba027b475fd2eff9a511b25
- SHA1 43245704a146a84a88d167a7a8c4b3855ec535d8
- SHA512 6a8c5cb95af8d1f7b1ee53761df1bd3250c9f46ab1c2469b11b25034ce9aaa5d82458e3653bd36289a67e42249c51d5f0f54084c04bbd717d5d66300929d5f29
- SSDEEP 98304:Hwoj5lQd67prdBxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22D:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bP
- TLSH T109860202B7E880B5F1B35B35DEB586219A767C629E34D20F13D8561D0E72690EE39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-25_37941ccc8ba027b475fd2eff9a511b25_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_37941ccc8ba027b475fd2eff9a511b25_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_37941ccc8ba027b475fd2eff9a511b25_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 8.1MB
- SHA256 7953ffe8013118500d2f1c476c8c3d2b105c5ad263c8bfffad9ffabde50e3619
- MD5 37941ccc8ba027b475fd2eff9a511b25
- SHA1 43245704a146a84a88d167a7a8c4b3855ec535d8
- SHA512 6a8c5cb95af8d1f7b1ee53761df1bd3250c9f46ab1c2469b11b25034ce9aaa5d82458e3653bd36289a67e42249c51d5f0f54084c04bbd717d5d66300929d5f29
- SSDEEP 98304:Hwoj5lQd67prdBxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/kjRm4OWL22D:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bP
- TLSH T109860202B7E880B5F1B35B35DEB586219A767C629E34D20F13D8561D0E72690EE39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory