General
- Target 2026-08-03_c9c141449aa623de3bb212f8cbe6351b_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.8MB
- Sample260804-lqytcsxapd
- SHA256 76cb2ef2c10e34453ec7ce3933eabc87e5b48a8b8c1ebb5fae8b80fa4ffa4114
- MD5 c9c141449aa623de3bb212f8cbe6351b
- SHA1 c37c99782fd058604e65eafe42482d8ce5f6f339
- SHA512 c273c1daa78f20fb7586f14416fb1bc907676c8f31a35d1e91c93a8fd2f78dd607c807ff482dbda8670453a2f7b82edade876c8103b29969ed241a1e47bc2172
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdMdt3d6+db:HGIbUwF1VERmj2ba
- TLSH T1BBD6D00273E48075F1B36735CEBA9621DA7A7C229F34D24F1398565D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_c9c141449aa623de3bb212f8cbe6351b_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_c9c141449aa623de3bb212f8cbe6351b_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_c9c141449aa623de3bb212f8cbe6351b_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.8MB
- SHA256 76cb2ef2c10e34453ec7ce3933eabc87e5b48a8b8c1ebb5fae8b80fa4ffa4114
- MD5 c9c141449aa623de3bb212f8cbe6351b
- SHA1 c37c99782fd058604e65eafe42482d8ce5f6f339
- SHA512 c273c1daa78f20fb7586f14416fb1bc907676c8f31a35d1e91c93a8fd2f78dd607c807ff482dbda8670453a2f7b82edade876c8103b29969ed241a1e47bc2172
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdMdt3d6+db:HGIbUwF1VERmj2ba
- TLSH T1BBD6D00273E48075F1B36735CEBA9621DA7A7C229F34D24F1398565D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory