General
- Target 2026-07-28_6c0e8351319beb0d95edf00612919f78_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 24.7MB
- Sample260729-bdgzzasyez
- SHA256 d085015d6d04240cfb759c2ef5034d276b8b3ff9695a5279c968d13f2ad7f1f9
- MD5 6c0e8351319beb0d95edf00612919f78
- SHA1 35a36680abf05c37ff6ebbd274cea1a1da0f7faa
- SHA512 9434e65e4078ad3e2c7d46c72581a81ddae06b2c90386a0a79fbd86af767a58e05855f994ae8020706baea33a10a5d5b6bef6ce9cb7c9a4e52941e456d5864e4
- SSDEEP 393216:HxIbUwF1VERmj2bpmHN6+JrvomHN6+JrvE:HxIY092b8brRbrM
- TLSH T192478C6162E760FCE0BBE1398A7A8731E6727C130631934F13BCD65A1F636546D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-28_6c0e8351319beb0d95edf00612919f78_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_6c0e8351319beb0d95edf00612919f78_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_6c0e8351319beb0d95edf00612919f78_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 24.7MB
- SHA256 d085015d6d04240cfb759c2ef5034d276b8b3ff9695a5279c968d13f2ad7f1f9
- MD5 6c0e8351319beb0d95edf00612919f78
- SHA1 35a36680abf05c37ff6ebbd274cea1a1da0f7faa
- SHA512 9434e65e4078ad3e2c7d46c72581a81ddae06b2c90386a0a79fbd86af767a58e05855f994ae8020706baea33a10a5d5b6bef6ce9cb7c9a4e52941e456d5864e4
- SSDEEP 393216:HxIbUwF1VERmj2bpmHN6+JrvomHN6+JrvE:HxIY092b8brRbrM
- TLSH T192478C6162E760FCE0BBE1398A7A8731E6727C130631934F13BCD65A1F636546D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory