General
- Target 2026-06-30_6eaa96ce9ce1d5e6c0e56087e824b7a6_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- Sample260701-e3jfwaes9j
- SHA256 62d99a826f9cf3847afcbcc3d9676af778b58a01d101e903e8906d589c60e042
- MD5 6eaa96ce9ce1d5e6c0e56087e824b7a6
- SHA1 14e3c4d861b749dd3728d43d60d40b80bf08a69c
- SHA512 e8c3c873d7f3efdbee8f3934357df0d23f8bc5d4425182edac7e39ee019c768be789fc7d7f89753cfe51ddc59b344c6a4160bce696dac1460e4b3da4702ffc87
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdsMdYd6:HGIbUwF1VERmj2bd
- TLSH T16CD6D00173E48075F1F36B35CEBA96219A7A7C629F34D24F1398561D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-30_6eaa96ce9ce1d5e6c0e56087e824b7a6_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_6eaa96ce9ce1d5e6c0e56087e824b7a6_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_6eaa96ce9ce1d5e6c0e56087e824b7a6_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- SHA256 62d99a826f9cf3847afcbcc3d9676af778b58a01d101e903e8906d589c60e042
- MD5 6eaa96ce9ce1d5e6c0e56087e824b7a6
- SHA1 14e3c4d861b749dd3728d43d60d40b80bf08a69c
- SHA512 e8c3c873d7f3efdbee8f3934357df0d23f8bc5d4425182edac7e39ee019c768be789fc7d7f89753cfe51ddc59b344c6a4160bce696dac1460e4b3da4702ffc87
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdsMdYd6:HGIbUwF1VERmj2bd
- TLSH T16CD6D00173E48075F1F36B35CEBA96219A7A7C629F34D24F1398561D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory