General
- Target 2026-07-31_939dfcb89e81ae12c888de4a4060f9f7_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 22.5MB
- Sample260801-brwqaacl5x
- SHA256 267a7713fb58eaa1fe1298e72b60fa7e926a4c890963fe6d0cbd91c882b0e211
- MD5 939dfcb89e81ae12c888de4a4060f9f7
- SHA1 e255ed9fed5cb54d15f7a5a1e266f7ac7059295d
- SHA512 68b51d9d45e9884e44afa7591106d64007b0f5a669984c8d625ea535daaee5f4f4a21a23e687dc8248673bdc9c9f81a174a1014d9db9e074cc0bf744b0616349
- SSDEEP 393216:H6IbUwF1VERmj2bAmHN6+JrvFxmHN6+JrvE:H6IY092bhbrabrs
- TLSH T1F5379D6162A760FDE0BFE139893A8731E6727C130631934F12BCD65A2F636546D29B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-31_939dfcb89e81ae12c888de4a4060f9f7_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_939dfcb89e81ae12c888de4a4060f9f7_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_939dfcb89e81ae12c888de4a4060f9f7_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 22.5MB
- SHA256 267a7713fb58eaa1fe1298e72b60fa7e926a4c890963fe6d0cbd91c882b0e211
- MD5 939dfcb89e81ae12c888de4a4060f9f7
- SHA1 e255ed9fed5cb54d15f7a5a1e266f7ac7059295d
- SHA512 68b51d9d45e9884e44afa7591106d64007b0f5a669984c8d625ea535daaee5f4f4a21a23e687dc8248673bdc9c9f81a174a1014d9db9e074cc0bf744b0616349
- SSDEEP 393216:H6IbUwF1VERmj2bAmHN6+JrvFxmHN6+JrvE:H6IY092bhbrabrs
- TLSH T1F5379D6162A760FDE0BFE139893A8731E6727C130631934F12BCD65A2F636546D29B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory