General
- Target 2026-07-30_2e59f5ea58f860a4165847d081b92a14_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 22.1MB
- Sample260731-awwqeaaa97
- SHA256 f12798ee4c2d75004eb8b3ad4df2fb4ce8a58aac3a5c8a36757df4b1276df73b
- MD5 2e59f5ea58f860a4165847d081b92a14
- SHA1 8ebb3ae2caa4b34fe8a195506fb81601d78b8d94
- SHA512 0d5978d265763c92b81cd8eeedafe63b5aef1b329cb9ec0ce4e0558005ffb45c6000f2499d5ccd4dead01e2633c426ab4572ff7dfa350319ba60c73215dc437e
- SSDEEP 393216:H6IbUwF1VERmj2bAmHN6+JrvFxmHN6+Jrvi:H6IY092bhbrabrK
- TLSH T161378CA162A760FDE0BFE13989368731E6727C130531934F12BCD65A2F636646D29B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-30_2e59f5ea58f860a4165847d081b92a14_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_2e59f5ea58f860a4165847d081b92a14_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_2e59f5ea58f860a4165847d081b92a14_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 22.1MB
- SHA256 f12798ee4c2d75004eb8b3ad4df2fb4ce8a58aac3a5c8a36757df4b1276df73b
- MD5 2e59f5ea58f860a4165847d081b92a14
- SHA1 8ebb3ae2caa4b34fe8a195506fb81601d78b8d94
- SHA512 0d5978d265763c92b81cd8eeedafe63b5aef1b329cb9ec0ce4e0558005ffb45c6000f2499d5ccd4dead01e2633c426ab4572ff7dfa350319ba60c73215dc437e
- SSDEEP 393216:H6IbUwF1VERmj2bAmHN6+JrvFxmHN6+Jrvi:H6IY092bhbrabrK
- TLSH T161378CA162A760FDE0BFE13989368731E6727C130531934F12BCD65A2F636646D29B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory