General
- Target 2026-07-27_c84fdd362e61035a79babddb0f4d11f3_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 23.0MB
- Sample260727-js594sbl8y
- SHA256 dbec9dda2d79f9cd1176d24393563c0bd6b415f61e88ffe5d6f8f2dd9cf13b43
- MD5 c84fdd362e61035a79babddb0f4d11f3
- SHA1 4f6299a6ce71f39112f60f734914cce161d57b10
- SHA512 8b5d437d35c6cac403fdb0b3f482dd3f2b5fc4cc8b58e437bd1f34b0f47acd9eb3c8540dcea62b68d9e3da80eace612224edb61a02e4692fb48f8baad1791f50
- SSDEEP 393216:HxIbUwF1VERmj2bpmHN6+Jrv0mHN6+JrvI:HxIY092b8brdbrw
- TLSH T1C5378C6162E760FDE0BFE1398A7A8731E6727C130531930F12BCD65A2F636546D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-27_c84fdd362e61035a79babddb0f4d11f3_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-27_c84fdd362e61035a79babddb0f4d11f3_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_c84fdd362e61035a79babddb0f4d11f3_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 23.0MB
- SHA256 dbec9dda2d79f9cd1176d24393563c0bd6b415f61e88ffe5d6f8f2dd9cf13b43
- MD5 c84fdd362e61035a79babddb0f4d11f3
- SHA1 4f6299a6ce71f39112f60f734914cce161d57b10
- SHA512 8b5d437d35c6cac403fdb0b3f482dd3f2b5fc4cc8b58e437bd1f34b0f47acd9eb3c8540dcea62b68d9e3da80eace612224edb61a02e4692fb48f8baad1791f50
- SSDEEP 393216:HxIbUwF1VERmj2bpmHN6+Jrv0mHN6+JrvI:HxIY092b8brdbrw
- TLSH T1C5378C6162E760FDE0BFE1398A7A8731E6727C130531930F12BCD65A2F636546D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory