General
- Target 2026-07-12_de2112e45d5094197239af8e85c78588_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 16.2MB
- Sample260712-y7a5vaat81
- SHA256 88ecb23c7bfc20e7495f3042147677c02070a1a23f57c65bacc0b2ef128724f3
- MD5 de2112e45d5094197239af8e85c78588
- SHA1 b0178a4d3878820945792149fcaa8c33adaeb258
- SHA512 d4688149ce19b5e98e9fbb9d8910abb0a49159dda7b9b74baf2134ca393147ff7b50d0971d0ab245733f266975a357a5ac4c7248c66f10c07752928becfdb7cc
- SSDEEP 196608:HV0dEdfdWfAeGZF6bUpMBF1p/kjRm4OWi2bpmHpn6F44IAWv4d0:HxIbUwF1VERmj2bpmHN6+Jrv3
- TLSH T1B107AE5162E660F8E0BBE5398A7A8731E6727C130631934F13BCD65A1F63650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-12_de2112e45d5094197239af8e85c78588_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_de2112e45d5094197239af8e85c78588_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_de2112e45d5094197239af8e85c78588_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 16.2MB
- SHA256 88ecb23c7bfc20e7495f3042147677c02070a1a23f57c65bacc0b2ef128724f3
- MD5 de2112e45d5094197239af8e85c78588
- SHA1 b0178a4d3878820945792149fcaa8c33adaeb258
- SHA512 d4688149ce19b5e98e9fbb9d8910abb0a49159dda7b9b74baf2134ca393147ff7b50d0971d0ab245733f266975a357a5ac4c7248c66f10c07752928becfdb7cc
- SSDEEP 196608:HV0dEdfdWfAeGZF6bUpMBF1p/kjRm4OWi2bpmHpn6F44IAWv4d0:HxIbUwF1VERmj2bpmHN6+Jrv3
- TLSH T1B107AE5162E660F8E0BBE5398A7A8731E6727C130631934F13BCD65A1F63650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory