General
- Target 2026-07-06_028c1b9fe0d32d2233a364a51bfe703b_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 17.5MB
- Sample260706-2s976sas7r
- SHA256 16ce9a4388d4851a8a05f53852b685fc2d7f27f7bd4fca1bca753e09aa663dfc
- MD5 028c1b9fe0d32d2233a364a51bfe703b
- SHA1 1e119b3b09df14f1f813afccbece6188317c6b0a
- SHA512 78370d546c344c9e2190d80ad709ce563f5a34e01e33b51cf0edddfe374d0d0fcbd2f6e46ef856ec49c12336dcd00de6a82aeb4dbd83400462d6deb57813abcc
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdsrd8mHpn6F44IAWvf:HGIbUwF1VERmj2b9mHN6+Jrvf
- TLSH T15A07BE5162E660F8E0BBD6358A7A8731E6727C130A31934F13ACD65A1F73650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-06_028c1b9fe0d32d2233a364a51bfe703b_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_028c1b9fe0d32d2233a364a51bfe703b_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_028c1b9fe0d32d2233a364a51bfe703b_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 17.5MB
- SHA256 16ce9a4388d4851a8a05f53852b685fc2d7f27f7bd4fca1bca753e09aa663dfc
- MD5 028c1b9fe0d32d2233a364a51bfe703b
- SHA1 1e119b3b09df14f1f813afccbece6188317c6b0a
- SHA512 78370d546c344c9e2190d80ad709ce563f5a34e01e33b51cf0edddfe374d0d0fcbd2f6e46ef856ec49c12336dcd00de6a82aeb4dbd83400462d6deb57813abcc
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdsrd8mHpn6F44IAWvf:HGIbUwF1VERmj2b9mHN6+Jrvf
- TLSH T15A07BE5162E660F8E0BBD6358A7A8731E6727C130A31934F13ACD65A1F73650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory