General
- Target 2026-08-10_0c3e22e272efc0d1ad3dfae9eb801cfb_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 14.1MB
- Sample260810-2y7n8sbm4w
- SHA256 84fdf7613ca2a389627c3d5f9e83bdcf1012dbc5ec89cee09c3e0d2a7514427c
- MD5 0c3e22e272efc0d1ad3dfae9eb801cfb
- SHA1 d3550bf39543f2603e606001bc0af4c4c3319fc7
- SHA512 d39ef0c3ae58c9bd5989ec248c35575ae9cca1b746586ed643f1a712d89bf247df35cf6d45c97238a6f9ae73935a560af293bb7e229fa82c2cfd8b84d5844357
- SSDEEP 196608:HVmj5Vjxd4jgdBdSmHpn6F44IAWv9jZd3jpd+jIdBjCj3dIda:Hw/s9mHN6+Jrv9z6kmh
- TLSH T12FE65A5172E65AF8E0BF913589758731D6777C124E3083CF13ACAA5A3E326906D39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_0c3e22e272efc0d1ad3dfae9eb801cfb_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_0c3e22e272efc0d1ad3dfae9eb801cfb_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_0c3e22e272efc0d1ad3dfae9eb801cfb_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 14.1MB
- SHA256 84fdf7613ca2a389627c3d5f9e83bdcf1012dbc5ec89cee09c3e0d2a7514427c
- MD5 0c3e22e272efc0d1ad3dfae9eb801cfb
- SHA1 d3550bf39543f2603e606001bc0af4c4c3319fc7
- SHA512 d39ef0c3ae58c9bd5989ec248c35575ae9cca1b746586ed643f1a712d89bf247df35cf6d45c97238a6f9ae73935a560af293bb7e229fa82c2cfd8b84d5844357
- SSDEEP 196608:HVmj5Vjxd4jgdBdSmHpn6F44IAWv9jZd3jpd+jIdBjCj3dIda:Hw/s9mHN6+Jrv9z6kmh
- TLSH T12FE65A5172E65AF8E0BF913589758731D6777C124E3083CF13ACAA5A3E326906D39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory