General
- Target 2026-07-15_e1986aa3722d21dcf3ef0380a1542cdc_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 26.3MB
- Sample260715-er2hbad16w
- SHA256 150902f17b556829821a76772829bc66e243125c90d62ab69a998fe34a87b091
- MD5 e1986aa3722d21dcf3ef0380a1542cdc
- SHA1 44fe3392bded637e3592a47e308fd85661146b71
- SHA512 6d6e0248e8b5179d41f21495538077ff26466b3df5b74c315dd8e0e9a994a27911c38b4cdfe4a82c2326d2a1be1150d72aab21d44939aa82905385806e4c2314
- SSDEEP 393216:Hw/slmHN6+JrvcmHN6+JrvvmHN6+JrvV1:Hybr1brWbrH
- TLSH T1AA575B6162E761FCE0BFD1398A3A8731E6727C130A31934F12BCD65A2F636546D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-15_e1986aa3722d21dcf3ef0380a1542cdc_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_e1986aa3722d21dcf3ef0380a1542cdc_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_e1986aa3722d21dcf3ef0380a1542cdc_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 26.3MB
- SHA256 150902f17b556829821a76772829bc66e243125c90d62ab69a998fe34a87b091
- MD5 e1986aa3722d21dcf3ef0380a1542cdc
- SHA1 44fe3392bded637e3592a47e308fd85661146b71
- SHA512 6d6e0248e8b5179d41f21495538077ff26466b3df5b74c315dd8e0e9a994a27911c38b4cdfe4a82c2326d2a1be1150d72aab21d44939aa82905385806e4c2314
- SSDEEP 393216:Hw/slmHN6+JrvcmHN6+JrvvmHN6+JrvV1:Hybr1brWbrH
- TLSH T1AA575B6162E761FCE0BFD1398A3A8731E6727C130A31934F12BCD65A2F636546D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory