General
- Target 2026-07-12_351e23d794ac9b53e40b497408da03a3_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 19.9MB
- Sample260712-q1krpsaz2r
- SHA256 1fa8545ad966dcca13fb5e1b73094dce7a6dba58de9e7799c5bd77ce2604a8e8
- MD5 351e23d794ac9b53e40b497408da03a3
- SHA1 7197af079765c2c711aa89c1cf1bb4106fa2bfc4
- SHA512 3cf55420bc6d078aa4b8f675ae89a0925a64929f5c72042c701ef43ab0b012349fe367c82ed34924adf495501f38b87168b95b792b0cfe8d96040e7bfb6bde90
- SSDEEP 196608:HVmj5Vjxd4jgdvkdzfd7mHpn6F44IAWvddRu/mHpn6F44IAWv8djjSdT:Hw/slmHN6+JrvcmHN6+Jrv6M
- TLSH T1A7275B5162E661F8E0BFD139897A8731E6727C130A31938F13BCDA5A2F636506D39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-12_351e23d794ac9b53e40b497408da03a3_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_351e23d794ac9b53e40b497408da03a3_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_351e23d794ac9b53e40b497408da03a3_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 19.9MB
- SHA256 1fa8545ad966dcca13fb5e1b73094dce7a6dba58de9e7799c5bd77ce2604a8e8
- MD5 351e23d794ac9b53e40b497408da03a3
- SHA1 7197af079765c2c711aa89c1cf1bb4106fa2bfc4
- SHA512 3cf55420bc6d078aa4b8f675ae89a0925a64929f5c72042c701ef43ab0b012349fe367c82ed34924adf495501f38b87168b95b792b0cfe8d96040e7bfb6bde90
- SSDEEP 196608:HVmj5Vjxd4jgdvkdzfd7mHpn6F44IAWvddRu/mHpn6F44IAWv8djjSdT:Hw/slmHN6+JrvcmHN6+Jrv6M
- TLSH T1A7275B5162E661F8E0BFD139897A8731E6727C130A31938F13BCDA5A2F636506D39723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory