General
- Target 2026-08-04_bf5a3a2b647c331986f5631461f1858a_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- Sample260804-gajx2sdf85
- SHA256 b72b611c8c563308797bc78afc233933af9e88204256637b9e67c868b6d1f33e
- MD5 bf5a3a2b647c331986f5631461f1858a
- SHA1 dd935d2d92b4c62455ac6805d1e34eb6ec30a306
- SHA512 33a192d6f4253311cd87e32d3edcacd8a5dc11663529760b6d4f115158a019e6dec8e24216c14bba5f33f3ea67c8c606d2eb8cd81f1535a26a653b9a109b176d
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdMdt3d6h:HGIbUwF1VERmj2bV
- TLSH T1B7D6D00173E48075F1B36B35CEBA96219A7A7C229F34D24F13D8565D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_bf5a3a2b647c331986f5631461f1858a_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_bf5a3a2b647c331986f5631461f1858a_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_bf5a3a2b647c331986f5631461f1858a_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- SHA256 b72b611c8c563308797bc78afc233933af9e88204256637b9e67c868b6d1f33e
- MD5 bf5a3a2b647c331986f5631461f1858a
- SHA1 dd935d2d92b4c62455ac6805d1e34eb6ec30a306
- SHA512 33a192d6f4253311cd87e32d3edcacd8a5dc11663529760b6d4f115158a019e6dec8e24216c14bba5f33f3ea67c8c606d2eb8cd81f1535a26a653b9a109b176d
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdMdt3d6h:HGIbUwF1VERmj2bV
- TLSH T1B7D6D00173E48075F1B36B35CEBA96219A7A7C229F34D24F13D8565D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory