General
- Target 2026-08-04_079455779fe3e6c4dc56a7629bd9bc74_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 26.4MB
- Sample260805-bqhr2asyex
- SHA256 2395043a204bd8196035adb5ec154e2ffe3ea625295ada1ac81e323b8569042e
- MD5 079455779fe3e6c4dc56a7629bd9bc74
- SHA1 7b11ad1d5118bfccecf0147359e2afbaad261bac
- SHA512 8adf2b4faa786433d9cf1dfdf37926017decc6256b3c7884b70bedb48a887d215e6466a4747fd3ca01d2d9a23b9af2670541e9d063631373aceaade4c1e3075c
- SSDEEP 393216:HxIbUwF1VERmj2bpmHN6+JrvomHN6+Jrv8s:HxIY092b8brRbrB
- TLSH T142578D5162E660F8E0BBE1358A7A8731E6727C134A31934F13BCD65A1F63650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_079455779fe3e6c4dc56a7629bd9bc74_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_079455779fe3e6c4dc56a7629bd9bc74_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_079455779fe3e6c4dc56a7629bd9bc74_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 26.4MB
- SHA256 2395043a204bd8196035adb5ec154e2ffe3ea625295ada1ac81e323b8569042e
- MD5 079455779fe3e6c4dc56a7629bd9bc74
- SHA1 7b11ad1d5118bfccecf0147359e2afbaad261bac
- SHA512 8adf2b4faa786433d9cf1dfdf37926017decc6256b3c7884b70bedb48a887d215e6466a4747fd3ca01d2d9a23b9af2670541e9d063631373aceaade4c1e3075c
- SSDEEP 393216:HxIbUwF1VERmj2bpmHN6+JrvomHN6+Jrv8s:HxIY092b8brRbrB
- TLSH T142578D5162E660F8E0BBE1358A7A8731E6727C134A31934F13BCD65A1F63650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory