General
- Target 2026-07-07_adab156ce94efb7007f5446758c565d4_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 15.7MB
- Sample260707-2r2jmsfv61
- SHA256 2663548ddd089a0f07bf1d91249a3fee47cada734b0790de019d01b36a9997f0
- MD5 adab156ce94efb7007f5446758c565d4
- SHA1 18cae67bb72878db6ba91b52fefb1e0e384af846
- SHA512 6957ea23242559b566aaddb3988d4d3d5f7f8a4adbfdbd8bb5595ea85c224c93f6df7c881d78e9de80c24f73ea43a532cf2e629cd5f6e4e691fbb86d9a5f34be
- SSDEEP 196608:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bAmHpn6F44IAWv1dBjZ1dz:H6IbUwF1VERmj2bAmHN6+JrvFJ
- TLSH T144F6AE5162E760F8E0BFE1398A768731E6727C130A31934F13BCD65A2F636546D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-07_adab156ce94efb7007f5446758c565d4_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_adab156ce94efb7007f5446758c565d4_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_adab156ce94efb7007f5446758c565d4_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 15.7MB
- SHA256 2663548ddd089a0f07bf1d91249a3fee47cada734b0790de019d01b36a9997f0
- MD5 adab156ce94efb7007f5446758c565d4
- SHA1 18cae67bb72878db6ba91b52fefb1e0e384af846
- SHA512 6957ea23242559b566aaddb3988d4d3d5f7f8a4adbfdbd8bb5595ea85c224c93f6df7c881d78e9de80c24f73ea43a532cf2e629cd5f6e4e691fbb86d9a5f34be
- SSDEEP 196608:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bAmHpn6F44IAWv1dBjZ1dz:H6IbUwF1VERmj2bAmHN6+JrvFJ
- TLSH T144F6AE5162E760F8E0BFE1398A768731E6727C130A31934F13BCD65A2F636546D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory