General
- Target 2026-07-08_2577b9e7ee848410f17184ee9a6c397d_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 23.4MB
- Sample260708-spe37ahs4z
- SHA256 35db277592259d30d1b8f496434c0f4dd7046a9c4fd40b969a50c42e2f6a49e9
- MD5 2577b9e7ee848410f17184ee9a6c397d
- SHA1 e2ef4867bdb58f035123ce98d699f67a3ed23d92
- SHA512 309eb6cdd0a1d9fa5b5bd7cc9d231443a34ae3194448307321b0910f1ba3585cb22e5dd3764ff30986b86af96ec057cdc2529127d1c453400529828426947f90
- SSDEEP 393216:HxIbUwF1VERmj2bpmHN6+JrvomHN6+Jrvc:HxIY092b8brRbrU
- TLSH T16C478C6162E760FCE0BBE1398A7A8731E6727C130531934F12BCD65A2F636546D29B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-08_2577b9e7ee848410f17184ee9a6c397d_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_2577b9e7ee848410f17184ee9a6c397d_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_2577b9e7ee848410f17184ee9a6c397d_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 23.4MB
- SHA256 35db277592259d30d1b8f496434c0f4dd7046a9c4fd40b969a50c42e2f6a49e9
- MD5 2577b9e7ee848410f17184ee9a6c397d
- SHA1 e2ef4867bdb58f035123ce98d699f67a3ed23d92
- SHA512 309eb6cdd0a1d9fa5b5bd7cc9d231443a34ae3194448307321b0910f1ba3585cb22e5dd3764ff30986b86af96ec057cdc2529127d1c453400529828426947f90
- SSDEEP 393216:HxIbUwF1VERmj2bpmHN6+JrvomHN6+Jrvc:HxIY092b8brRbrU
- TLSH T16C478C6162E760FCE0BBE1398A7A8731E6727C130531934F12BCD65A2F636546D29B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory