General
- Target 2026-08-10_b5e1729ff3f2d6e598f1a0363bde22a7_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 15.5MB
- Sample260810-lqk79seq4s
- SHA256 fc57773245e4552525e2e6ecaf16b2e24f8c92c6fbaebd50832fa96c967c4323
- MD5 b5e1729ff3f2d6e598f1a0363bde22a7
- SHA1 c7a7592f56d71a7b936dfa542284cb07bfce7f9c
- SHA512 0b9b6b2985fb82fb4c51e94322912fa9d83178d9a4cfe329b20083b0fe62867d52e0d96df54f6e70763ea88157fd93b19e98651734abad2925e22cdfd2a24961
- SSDEEP 196608:HVmj5Vjxd4jgdBdkdnmHpn6F44IAWvadMj4pd1jRdKdBOjTdzU:Hw/s7mHN6+Jrvr8dy
- TLSH T18BF66C1173E655F8E1BF92358A758731D6777C124E30838F13AC9A5A2E33690AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_b5e1729ff3f2d6e598f1a0363bde22a7_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_b5e1729ff3f2d6e598f1a0363bde22a7_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_b5e1729ff3f2d6e598f1a0363bde22a7_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 15.5MB
- SHA256 fc57773245e4552525e2e6ecaf16b2e24f8c92c6fbaebd50832fa96c967c4323
- MD5 b5e1729ff3f2d6e598f1a0363bde22a7
- SHA1 c7a7592f56d71a7b936dfa542284cb07bfce7f9c
- SHA512 0b9b6b2985fb82fb4c51e94322912fa9d83178d9a4cfe329b20083b0fe62867d52e0d96df54f6e70763ea88157fd93b19e98651734abad2925e22cdfd2a24961
- SSDEEP 196608:HVmj5Vjxd4jgdBdkdnmHpn6F44IAWvadMj4pd1jRdKdBOjTdzU:Hw/s7mHN6+Jrvr8dy
- TLSH T18BF66C1173E655F8E1BF92358A758731D6777C124E30838F13AC9A5A2E33690AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory