General
- Target 2026-05-30_aec734718ced2a43cf8ea6c782eeda6a_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 12.4MB
- Sample260530-re76jset4x
- SHA256 ca475b788ad2228af06fb6d79cd89cadfccfba437844804ed3c7d0ca7209dca6
- MD5 aec734718ced2a43cf8ea6c782eeda6a
- SHA1 03b9d16530dc0fa1796d9b4d6bfaf985f8955c76
- SHA512 2127b5e95ec5bdb804cd1e116bb3cd4d0eb72684dee2fe93e164ac46a6f01cb940dd9f12df8ceae22911b401475365762f313f52cf310a054474767f57071a9c
- SSDEEP 196608:HVmj5VjxdhmHpn6F44IAWvXdo5dMHdRdCdB:Hw/1mHN6+JrvO
- TLSH T188D66B5172E651F8E0BB92358A7A8731E6727C134A31834F13ACD65A2F73650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-30_aec734718ced2a43cf8ea6c782eeda6a_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-30_aec734718ced2a43cf8ea6c782eeda6a_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-30_aec734718ced2a43cf8ea6c782eeda6a_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 12.4MB
- SHA256 ca475b788ad2228af06fb6d79cd89cadfccfba437844804ed3c7d0ca7209dca6
- MD5 aec734718ced2a43cf8ea6c782eeda6a
- SHA1 03b9d16530dc0fa1796d9b4d6bfaf985f8955c76
- SHA512 2127b5e95ec5bdb804cd1e116bb3cd4d0eb72684dee2fe93e164ac46a6f01cb940dd9f12df8ceae22911b401475365762f313f52cf310a054474767f57071a9c
- SSDEEP 196608:HVmj5VjxdhmHpn6F44IAWvXdo5dMHdRdCdB:Hw/1mHN6+JrvO
- TLSH T188D66B5172E651F8E0BB92358A7A8731E6727C134A31834F13ACD65A2F73650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory