General
- Target 2026-07-21_924e93b620b7eb8f49e551ee88dd0d5b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 23.3MB
- Sample260722-bafbzabq7v
- SHA256 d261dc8bd71fb145c4ab0a07572978dab72532108cbe2ff83ca08c7305be76fa
- MD5 924e93b620b7eb8f49e551ee88dd0d5b
- SHA1 9f1b6b15e4d389f4943740674302a7387fd27058
- SHA512 4ef613e4f2caa93e5491a8d2a303d32011d01e368eed94a737fe40a17f0b7292b842ec59a5c744ec96fd563440713a24671c83f189d279bcc7feff9c8d0a1872
- SSDEEP 393216:H6IbUwF1VERmj2bAmHN6+JrvFxmHN6+Jrvuc:H6IY092bhbr+brB
- TLSH T125379D6162A761FCE0BFE13989368731E6727C130A31934F12BCD65A2F636546D29B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-21_924e93b620b7eb8f49e551ee88dd0d5b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_924e93b620b7eb8f49e551ee88dd0d5b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_924e93b620b7eb8f49e551ee88dd0d5b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 23.3MB
- SHA256 d261dc8bd71fb145c4ab0a07572978dab72532108cbe2ff83ca08c7305be76fa
- MD5 924e93b620b7eb8f49e551ee88dd0d5b
- SHA1 9f1b6b15e4d389f4943740674302a7387fd27058
- SHA512 4ef613e4f2caa93e5491a8d2a303d32011d01e368eed94a737fe40a17f0b7292b842ec59a5c744ec96fd563440713a24671c83f189d279bcc7feff9c8d0a1872
- SSDEEP 393216:H6IbUwF1VERmj2bAmHN6+JrvFxmHN6+Jrvuc:H6IY092bhbr+brB
- TLSH T125379D6162A761FCE0BFE13989368731E6727C130A31934F12BCD65A2F636546D29B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies WinLogon for persistence
- Custom signature
UPX dump on OEP (original entry point)
Drops file in System32 directory