General
- Target 2026-07-20_40b7804a7b93fd616b59f95469c80159_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 22.1MB
- Sample260720-l3f43sgx2v
- SHA256 ffdc6e7d62935c0f6106a1bca918c37e3b4373315c1bf84341aeedd0b1fce08c
- MD5 40b7804a7b93fd616b59f95469c80159
- SHA1 c20632b03297dfea73e512e5b77d33982ee8b0e9
- SHA512 16e8c506c4d026a2e63e97d1fe8b534b93263d608e9b729dbbbd57b0a261f08dfe6a6690e866b29863342622643627c9e07546e343e5b7371bda5af006b7d58b
- SSDEEP 393216:H6IbUwF1VERmj2bAmHN6+JrvFPmHN6+JrvF:H6IY092bhbrYbrd
- TLSH T186378CA162E760FCE0BFE1398A768731E6727C130531934F12BCD65A2F636546D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-20_40b7804a7b93fd616b59f95469c80159_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_40b7804a7b93fd616b59f95469c80159_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_40b7804a7b93fd616b59f95469c80159_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 22.1MB
- SHA256 ffdc6e7d62935c0f6106a1bca918c37e3b4373315c1bf84341aeedd0b1fce08c
- MD5 40b7804a7b93fd616b59f95469c80159
- SHA1 c20632b03297dfea73e512e5b77d33982ee8b0e9
- SHA512 16e8c506c4d026a2e63e97d1fe8b534b93263d608e9b729dbbbd57b0a261f08dfe6a6690e866b29863342622643627c9e07546e343e5b7371bda5af006b7d58b
- SSDEEP 393216:H6IbUwF1VERmj2bAmHN6+JrvFPmHN6+JrvF:H6IY092bhbrYbrd
- TLSH T186378CA162E760FCE0BFE1398A768731E6727C130531934F12BCD65A2F636546D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory