General
- Target 2026-08-06_f4641d1a3dfc3c407f1707b52ce19c3d_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 12.3MB
- Sample260806-2bttvsbm41
- SHA256 dcb49c637f5b4103a1fd7dbaa78e181ea2bc549820aef45a2aad77bb4c771407
- MD5 f4641d1a3dfc3c407f1707b52ce19c3d
- SHA1 a9afe9596b5cb7255f66cd826e8846ab554c33c3
- SHA512 1b2fcb4cd91942ff7c75013aba93406f0acb6ab5eee325d5d222d6765bb2d851ef445b64dee19512f8ceb944937d28abf9afaee36ae371a5924d769fba35878d
- SSDEEP 196608:HVmj5VjxdhmHpn6F44IAWvXdo5dMHdRd3j8:Hw/1mHN6+Jrv74
- TLSH T137D66C5172E651F8E0BB91358A768331E6767C134E31838F13ACDA5A2F73650AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-06_f4641d1a3dfc3c407f1707b52ce19c3d_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_f4641d1a3dfc3c407f1707b52ce19c3d_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_f4641d1a3dfc3c407f1707b52ce19c3d_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 12.3MB
- SHA256 dcb49c637f5b4103a1fd7dbaa78e181ea2bc549820aef45a2aad77bb4c771407
- MD5 f4641d1a3dfc3c407f1707b52ce19c3d
- SHA1 a9afe9596b5cb7255f66cd826e8846ab554c33c3
- SHA512 1b2fcb4cd91942ff7c75013aba93406f0acb6ab5eee325d5d222d6765bb2d851ef445b64dee19512f8ceb944937d28abf9afaee36ae371a5924d769fba35878d
- SSDEEP 196608:HVmj5VjxdhmHpn6F44IAWvXdo5dMHdRd3j8:Hw/1mHN6+Jrv74
- TLSH T137D66C5172E651F8E0BB91358A768331E6767C134E31838F13ACDA5A2F73650AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory