General
- Target 2026-06-30_4be6262c40e079412db03af0b5132a19_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 25.8MB
- Sample260701-frvkfaey3q
- SHA256 c0f0be88875a72c3335bd251cacab18eac8093d8423c70499826b9fc64c5ab25
- MD5 4be6262c40e079412db03af0b5132a19
- SHA1 13402e47634cf8a40831c75e06bc98c5af163c12
- SHA512 98754dee74165aeef7c7baf85b68e9caf649f3553a5e5b59222ee6fb427306944719b529f27de890d6bf162418da2b69ce950d8ee18e3f5099961ec4fa13d701
- SSDEEP 393216:Hw/s7mHN6+Jrvr80mHN6+JrvHmHN6+JrvJ:HEbrQbrubrh
- TLSH T188575B6162E761FCE0BFD139893A8731E6727C130A31934F12BCDA5A2F636546D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-30_4be6262c40e079412db03af0b5132a19_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_4be6262c40e079412db03af0b5132a19_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_4be6262c40e079412db03af0b5132a19_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 25.8MB
- SHA256 c0f0be88875a72c3335bd251cacab18eac8093d8423c70499826b9fc64c5ab25
- MD5 4be6262c40e079412db03af0b5132a19
- SHA1 13402e47634cf8a40831c75e06bc98c5af163c12
- SHA512 98754dee74165aeef7c7baf85b68e9caf649f3553a5e5b59222ee6fb427306944719b529f27de890d6bf162418da2b69ce950d8ee18e3f5099961ec4fa13d701
- SSDEEP 393216:Hw/s7mHN6+Jrvr80mHN6+JrvHmHN6+JrvJ:HEbrQbrubrh
- TLSH T188575B6162E761FCE0BFD139893A8731E6727C130A31934F12BCDA5A2F636546D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory