General
- Target 2026-08-01_e03a4f03f9f47f762ecee1704cf0c511_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 15.2MB
- Sample260801-xs8bcsv1cy
- SHA256 1d20c9e60a7a3cad6d2ee1b0beab7293aaf82d2762a7c7db7d5ba983d777302e
- MD5 e03a4f03f9f47f762ecee1704cf0c511
- SHA1 d816455b238bf6e8f78a2f7a14a9993693242cf3
- SHA512 9c1d05334331e1896386a77e0c9f14cb51ff6be578f427c0fad04545451a761f8cae3e70ab0a2a94512bf88d5c2ee11298b093babf947c4aa1e6759027bb9e0f
- SSDEEP 196608:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bAmHpn6F44IAWv1dBjwjz:H6IbUwF1VERmj2bAmHN6+JrvFUP
- TLSH T1EBF6BE5162E761FCE0BFD1398A368731E6727C130A31934F12BCDA5A2F636546D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_e03a4f03f9f47f762ecee1704cf0c511_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_e03a4f03f9f47f762ecee1704cf0c511_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_e03a4f03f9f47f762ecee1704cf0c511_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 15.2MB
- SHA256 1d20c9e60a7a3cad6d2ee1b0beab7293aaf82d2762a7c7db7d5ba983d777302e
- MD5 e03a4f03f9f47f762ecee1704cf0c511
- SHA1 d816455b238bf6e8f78a2f7a14a9993693242cf3
- SHA512 9c1d05334331e1896386a77e0c9f14cb51ff6be578f427c0fad04545451a761f8cae3e70ab0a2a94512bf88d5c2ee11298b093babf947c4aa1e6759027bb9e0f
- SSDEEP 196608:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bAmHpn6F44IAWv1dBjwjz:H6IbUwF1VERmj2bAmHN6+JrvFUP
- TLSH T1EBF6BE5162E761FCE0BFD1398A368731E6727C130A31934F12BCDA5A2F636546D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory