General
- Target 2026-04-26_985714154a1ebfdf421635df760a7aa2_akira_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop_vidar
- Size 18.3MB
- Sample260426-rd2mdaf12t
- SHA256 e467cc157e35d511827ffc79d76dfaf5ab680ba25f507d594ff6f3428d5cd005
- MD5 985714154a1ebfdf421635df760a7aa2
- SHA1 d8ec35cbfea4b012a51d9590252653bf7e50b88e
- SHA512 dfcb925067841e6b50048ebb7dc43d37cc720b3b545733be2b0ee23c19fd116591d4b0134c14a83393bd92de768a9e3a4d50d7f9439aa23b848056fd9c8b169f
- SSDEEP 393216:fIbUwF1VERmj2bohr1tqKP7UlZdrWlDzcLr:fIY092bop1tqKjVzkr
- TLSH T1B317AE2B72E800DCD0FAD1B9C91B4913E6757456037183DF179096AA2FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-26_985714154a1ebfdf421635df760a7aa2_akira_amadey_cobalt-strike_coinminer_elex_glassworm_hija.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-26_985714154a1ebfdf421635df760a7aa2_akira_amadey_cobalt-strike_coinminer_elex_glassworm_hija.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-26_985714154a1ebfdf421635df760a7aa2_akira_amadey_cobalt-strike_coinminer_elex_glassworm_hijackloader_icedid_luca-stealer_manuscrypt_njrat_remcos_rhadamanthys_smoke-loader_stop_vidar
- Size 18.3MB
- SHA256 e467cc157e35d511827ffc79d76dfaf5ab680ba25f507d594ff6f3428d5cd005
- MD5 985714154a1ebfdf421635df760a7aa2
- SHA1 d8ec35cbfea4b012a51d9590252653bf7e50b88e
- SHA512 dfcb925067841e6b50048ebb7dc43d37cc720b3b545733be2b0ee23c19fd116591d4b0134c14a83393bd92de768a9e3a4d50d7f9439aa23b848056fd9c8b169f
- SSDEEP 393216:fIbUwF1VERmj2bohr1tqKP7UlZdrWlDzcLr:fIY092bop1tqKjVzkr
- TLSH T1B317AE2B72E800DCD0FAD1B9C91B4913E6757456037183DF179096AA2FAB6F09E7EB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1