General
- Target 2026-08-01_b04d4095e63d05ea427df75389bda127_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 26.3MB
- Sample260802-aaxetazdrd
- SHA256 7b73f5a2d212c6ba009d632e159f0bfd8f88644f81b1692175a4696536bb8e7d
- MD5 b04d4095e63d05ea427df75389bda127
- SHA1 c3b2611503ca4c9a6c43735583182dd1d175383b
- SHA512 163925490ba6870068606343e2224955ef2a0aa197eeeaf362663b1397c4dac1248f2a54095b7d05051b1b768967cd47978db54fecb66c84cc70df5a0a3cba17
- SSDEEP 393216:HxIbUwF1VERmj2bpmHN6+JrvomHN6+Jrv8F:HxIY092b8brRbrs
- TLSH T1CA578D5162E660FDE0BBD1398A7A8731E6727C130A31934F13BCD65A1F63650AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_b04d4095e63d05ea427df75389bda127_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_b04d4095e63d05ea427df75389bda127_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_b04d4095e63d05ea427df75389bda127_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 26.3MB
- SHA256 7b73f5a2d212c6ba009d632e159f0bfd8f88644f81b1692175a4696536bb8e7d
- MD5 b04d4095e63d05ea427df75389bda127
- SHA1 c3b2611503ca4c9a6c43735583182dd1d175383b
- SHA512 163925490ba6870068606343e2224955ef2a0aa197eeeaf362663b1397c4dac1248f2a54095b7d05051b1b768967cd47978db54fecb66c84cc70df5a0a3cba17
- SSDEEP 393216:HxIbUwF1VERmj2bpmHN6+JrvomHN6+Jrv8F:HxIY092b8brRbrs
- TLSH T1CA578D5162E660FDE0BBD1398A7A8731E6727C130A31934F13BCD65A1F63650AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory