General
- Target 2026-08-08_e9dfe2cbd3e288d71fef6dd2b6d354f2_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 12.3MB
- Sample260808-cydzgsbb94
- SHA256 f4110ef9671928242e1278ba9aad75450f9d8205927e7e03bf6e9e5b8e6c5e2e
- MD5 e9dfe2cbd3e288d71fef6dd2b6d354f2
- SHA1 b4e29e9a098305ab8c7a5ea260cf56269b4c192b
- SHA512 81942725da1b70e364ddb050ff2c55844a9c436f083754d00c71d6da95b2f8706a687fd2a419c698680087d149e7a0ccbc37598db7fc5fd86699fcbe9867f2d7
- SSDEEP 196608:HVmj5VjxdhmHpn6F44IAWvXdo5dMHdRd3ji:Hw/1mHN6+Jrv72
- TLSH T181D66C5172E651F8E0BB91358A768331E6767C134E31838F13ACDA5A2F73650AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-08_e9dfe2cbd3e288d71fef6dd2b6d354f2_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_e9dfe2cbd3e288d71fef6dd2b6d354f2_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_e9dfe2cbd3e288d71fef6dd2b6d354f2_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 12.3MB
- SHA256 f4110ef9671928242e1278ba9aad75450f9d8205927e7e03bf6e9e5b8e6c5e2e
- MD5 e9dfe2cbd3e288d71fef6dd2b6d354f2
- SHA1 b4e29e9a098305ab8c7a5ea260cf56269b4c192b
- SHA512 81942725da1b70e364ddb050ff2c55844a9c436f083754d00c71d6da95b2f8706a687fd2a419c698680087d149e7a0ccbc37598db7fc5fd86699fcbe9867f2d7
- SSDEEP 196608:HVmj5VjxdhmHpn6F44IAWvXdo5dMHdRd3ji:Hw/1mHN6+Jrv72
- TLSH T181D66C5172E651F8E0BB91358A768331E6767C134E31838F13ACDA5A2F73650AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory