General
- Target 2026-08-04_3d57d0369eab980182208405b6c53f1b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 25.9MB
- Sample260805-be8t3sbd45
- SHA256 160f73a88fa49e67107a45d3815a7d274ca7a420add4094561320a6c9127d1c1
- MD5 3d57d0369eab980182208405b6c53f1b
- SHA1 080a13dc80063fc9770b86d73a87f9b042eb1730
- SHA512 605824e2d292f8800f381727630fc5e05991a5db380c88db0b8b3c945b18fd67d6522e737f80c832380924efb2ad9ef2f36f38307b2cff03300381523433b8bf
- SSDEEP 393216:HxIbUwF1VERmj2bpmHN6+JrvomHN6+Jrv8H:HxIY092b8brRbrg
- TLSH T18A578D5162E660FDE0BBD1398A7A8731E6727C130A31934F13BCD65A2F636506D39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_3d57d0369eab980182208405b6c53f1b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_3d57d0369eab980182208405b6c53f1b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_3d57d0369eab980182208405b6c53f1b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 25.9MB
- SHA256 160f73a88fa49e67107a45d3815a7d274ca7a420add4094561320a6c9127d1c1
- MD5 3d57d0369eab980182208405b6c53f1b
- SHA1 080a13dc80063fc9770b86d73a87f9b042eb1730
- SHA512 605824e2d292f8800f381727630fc5e05991a5db380c88db0b8b3c945b18fd67d6522e737f80c832380924efb2ad9ef2f36f38307b2cff03300381523433b8bf
- SSDEEP 393216:HxIbUwF1VERmj2bpmHN6+JrvomHN6+Jrv8H:HxIY092b8brRbrg
- TLSH T18A578D5162E660FDE0BBD1398A7A8731E6727C130A31934F13BCD65A2F636506D39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory