General
- Target 2026-06-30_140f3e3ecc8927352f64f8da5039acf3_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 16.6MB
- Sample260701-axpcqabv6j
- SHA256 10ca2feaaff43ab845401bb6d88e9e53c0d06159e64add030ceb1e9e88d4c486
- MD5 140f3e3ecc8927352f64f8da5039acf3
- SHA1 d5a467e20a614f24ce23681d53e00bccd6fadc40
- SHA512 0778e395465159b9470f1443f694b7adf233661be7e82890e2e5a8b38ba6fc37aa93a4891de6d3fcef004474b956356dd28ef6628750b92bddd394906f38e772
- SSDEEP 196608:HV0dEdfdWfAeGZF6bUpMBF1p/kjRm4OWi2bpmHpn6F44IAWv4dXdt:HxIbUwF1VERmj2bpmHN6+Jrv0
- TLSH T13B07BE5162E660F9E0BBE1398A7A8731E6727C130631934F13BCD65A1F63650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-30_140f3e3ecc8927352f64f8da5039acf3_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_140f3e3ecc8927352f64f8da5039acf3_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_140f3e3ecc8927352f64f8da5039acf3_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 16.6MB
- SHA256 10ca2feaaff43ab845401bb6d88e9e53c0d06159e64add030ceb1e9e88d4c486
- MD5 140f3e3ecc8927352f64f8da5039acf3
- SHA1 d5a467e20a614f24ce23681d53e00bccd6fadc40
- SHA512 0778e395465159b9470f1443f694b7adf233661be7e82890e2e5a8b38ba6fc37aa93a4891de6d3fcef004474b956356dd28ef6628750b92bddd394906f38e772
- SSDEEP 196608:HV0dEdfdWfAeGZF6bUpMBF1p/kjRm4OWi2bpmHpn6F44IAWv4dXdt:HxIbUwF1VERmj2bpmHN6+Jrv0
- TLSH T13B07BE5162E660F9E0BBE1398A7A8731E6727C130631934F13BCD65A1F63650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory