General
- Target 2026-07-10_ff429cbd425cf3e015bf86eb21dd4d1b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 25.5MB
- Sample260710-c5xp6scs6m
- SHA256 0912ad57d80dc4ab66b1010c798568462e0a6af2b47c3de53414bc0f281e5065
- MD5 ff429cbd425cf3e015bf86eb21dd4d1b
- SHA1 c49cfd75d6f5f20972779d56bb0d9c808e264328
- SHA512 0f07836c76c1916323cfc795ca9842b7f42b265e861dbecf590c87bbf78ab70117a43ca4fc65d86ef55700f4461b6b6c38c121b1fbe302bbed43646c0113abe3
- SSDEEP 196608:HVmj5Vjxd4jgdvkdzfd7mHpn6F44IAWvddRu/mHpn6F44IAWvqcmHpn6F44IAWv1:Hw/slmHN6+JrvcmHN6+JrvxmHN6+Jrv1
- TLSH T19D475A6162E761FCE0BFD1398A3A8731E6727C130A31934F12BCD65A2F636546D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-10_ff429cbd425cf3e015bf86eb21dd4d1b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_ff429cbd425cf3e015bf86eb21dd4d1b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_ff429cbd425cf3e015bf86eb21dd4d1b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 25.5MB
- SHA256 0912ad57d80dc4ab66b1010c798568462e0a6af2b47c3de53414bc0f281e5065
- MD5 ff429cbd425cf3e015bf86eb21dd4d1b
- SHA1 c49cfd75d6f5f20972779d56bb0d9c808e264328
- SHA512 0f07836c76c1916323cfc795ca9842b7f42b265e861dbecf590c87bbf78ab70117a43ca4fc65d86ef55700f4461b6b6c38c121b1fbe302bbed43646c0113abe3
- SSDEEP 196608:HVmj5Vjxd4jgdvkdzfd7mHpn6F44IAWvddRu/mHpn6F44IAWvqcmHpn6F44IAWv1:Hw/slmHN6+JrvcmHN6+JrvxmHN6+Jrv1
- TLSH T19D475A6162E761FCE0BFD1398A3A8731E6727C130A31934F12BCD65A2F636546D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory