General
- Target 2026-08-11_87c7b78e725e744fdbdc1195e7f29e6e_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 15.8MB
- Sample260811-3xrgasvbpd
- SHA256 f3a7e8648576513dca69c09d6b717b80d5362d1c5ce47f909e46df694e63a48c
- MD5 87c7b78e725e744fdbdc1195e7f29e6e
- SHA1 fc01db7377094efd02c62ba43cd07c177ddf5436
- SHA512 534f934e305678b3d7c2d323de2d63fe3e5184b2b6932e647e4e04585c657d18a0e7baf6b6848ab982492a56ba0e6e00543866e8f65a9a398167681ce9bd704e
- SSDEEP 196608:HVmj5Vjxd4jgdBdkdnmHpn6F44IAWvadMj4pd1jRdKdB2dfjmjLdeD:Hw/s7mHN6+Jrvr89SM
- TLSH T152F66B1172E655F8E1BF91358A768731D6777C124E3083CF13AC9A5A2E33690AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-11_87c7b78e725e744fdbdc1195e7f29e6e_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_87c7b78e725e744fdbdc1195e7f29e6e_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_87c7b78e725e744fdbdc1195e7f29e6e_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 15.8MB
- SHA256 f3a7e8648576513dca69c09d6b717b80d5362d1c5ce47f909e46df694e63a48c
- MD5 87c7b78e725e744fdbdc1195e7f29e6e
- SHA1 fc01db7377094efd02c62ba43cd07c177ddf5436
- SHA512 534f934e305678b3d7c2d323de2d63fe3e5184b2b6932e647e4e04585c657d18a0e7baf6b6848ab982492a56ba0e6e00543866e8f65a9a398167681ce9bd704e
- SSDEEP 196608:HVmj5Vjxd4jgdBdkdnmHpn6F44IAWvadMj4pd1jRdKdB2dfjmjLdeD:Hw/s7mHN6+Jrvr89SM
- TLSH T152F66B1172E655F8E1BF91358A768731D6777C124E3083CF13AC9A5A2E33690AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory