General
- Target 2026-07-22_3eebf4b37aea59fbac9441da7b8d396b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 15.7MB
- Sample260723-cbqprsfb42
- SHA256 9413ccfe56098816b8e93a222bf9c60b3d628d9b34fd69d1fda6548254da06cd
- MD5 3eebf4b37aea59fbac9441da7b8d396b
- SHA1 355d0d1e983719ac0e04d92a9f9287b15c37f91a
- SHA512 df38b64468c1922b4131d85703b9c92fd27c28cc6478970687fd9bd0c28a95a60514876a21469747cfffc90520eccb2b5aa0245977c49a4b6d0071b411ec8bf9
- SSDEEP 196608:HVmj5Vjxd4jgdBdkdnmHpn6F44IAWvadMj4pd1jRdKdB2dfjmjydTjs:Hw/s7mHN6+Jrvr89SMY
- TLSH T156F65B1172E656F8E1BF913589768731D6777C124E3083CF13AC9A5A2E33690AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-22_3eebf4b37aea59fbac9441da7b8d396b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_3eebf4b37aea59fbac9441da7b8d396b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_3eebf4b37aea59fbac9441da7b8d396b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 15.7MB
- SHA256 9413ccfe56098816b8e93a222bf9c60b3d628d9b34fd69d1fda6548254da06cd
- MD5 3eebf4b37aea59fbac9441da7b8d396b
- SHA1 355d0d1e983719ac0e04d92a9f9287b15c37f91a
- SHA512 df38b64468c1922b4131d85703b9c92fd27c28cc6478970687fd9bd0c28a95a60514876a21469747cfffc90520eccb2b5aa0245977c49a4b6d0071b411ec8bf9
- SSDEEP 196608:HVmj5Vjxd4jgdBdkdnmHpn6F44IAWvadMj4pd1jRdKdB2dfjmjydTjs:Hw/s7mHN6+Jrvr89SMY
- TLSH T156F65B1172E656F8E1BF913589768731D6777C124E3083CF13AC9A5A2E33690AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory