General
- Target 2026-07-15_90e1b7b0e1233ab44c541bddbad0a4aa_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 26.2MB
- Sample260715-e78xbsbx5q
- SHA256 8a71a35e53dccf5a7e55d2e2d481c7be2219a4b8a509a9f5ba565861f09dc3c8
- MD5 90e1b7b0e1233ab44c541bddbad0a4aa
- SHA1 61616061bcc58463f19dec9947c1a660ac51a4cb
- SHA512 96c67a5fa3c52739ab44bb74ad2bc4af4b81f2e1b6d614ae7215dbc1dc134a721465cce5e3c8267c30958c5b5a4582bd26b8eef7b5ca586f376baf05312ede23
- SSDEEP 393216:Hw/slmHN6+JrvcmHN6+JrvvmHN6+JrvVHv:Hybr1brWbrZ
- TLSH T1E9575B6162E761FCE0BFD139893A8731E6727C130A31938F127CDA5A2F636546D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-15_90e1b7b0e1233ab44c541bddbad0a4aa_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_90e1b7b0e1233ab44c541bddbad0a4aa_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_90e1b7b0e1233ab44c541bddbad0a4aa_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 26.2MB
- SHA256 8a71a35e53dccf5a7e55d2e2d481c7be2219a4b8a509a9f5ba565861f09dc3c8
- MD5 90e1b7b0e1233ab44c541bddbad0a4aa
- SHA1 61616061bcc58463f19dec9947c1a660ac51a4cb
- SHA512 96c67a5fa3c52739ab44bb74ad2bc4af4b81f2e1b6d614ae7215dbc1dc134a721465cce5e3c8267c30958c5b5a4582bd26b8eef7b5ca586f376baf05312ede23
- SSDEEP 393216:Hw/slmHN6+JrvcmHN6+JrvvmHN6+JrvVHv:Hybr1brWbrZ
- TLSH T1E9575B6162E761FCE0BFD139893A8731E6727C130A31938F127CDA5A2F636546D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory