General

  • Target
    2026-07-28_6c0e8351319beb0d95edf00612919f78_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
  • Size 24.7MB
  • Sample260729-bdgzzasyez
  • SHA256 d085015d6d04240cfb759c2ef5034d276b8b3ff9695a5279c968d13f2ad7f1f9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-28_6c0e8351319beb0d95edf00612919f78_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
    • Size 24.7MB
    • SHA256 d085015d6d04240cfb759c2ef5034d276b8b3ff9695a5279c968d13f2ad7f1f9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies WinLogon for persistence

    • UPX dump on OEP (original entry point)

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks