General
- Target 2026-08-11_a4562bae1c4c5f34d164f195da28f708_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 13.1MB
- Sample260811-c4y7lsca45
- SHA256 d1c56d184029214c2c7607f8281b418b42152660e77ce2300c67b4ebe273eeed
- MD5 a4562bae1c4c5f34d164f195da28f708
- SHA1 55658d1ab4e5ae706fcd3cb0d59d423642611a25
- SHA512 3555e039a37dcf86dd62f4c19b331e5ddfd92b9f5e599cfb6008cf382f0ca72b1e10b471d5243bed5a17258a64219e1b95b6a8e70c81861235a43d89d1fc5bb4
- SSDEEP 196608:HVmj5VjxdhmHpn6F44IAWvXdo5dMHdRd3jYddj1:Hw/1mHN6+Jrv70p
- TLSH T1C3D66B1172E655F8E0BF91358A768731D6767C134E30838F13ACDA5A2E73690AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-11_a4562bae1c4c5f34d164f195da28f708_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_a4562bae1c4c5f34d164f195da28f708_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_a4562bae1c4c5f34d164f195da28f708_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 13.1MB
- SHA256 d1c56d184029214c2c7607f8281b418b42152660e77ce2300c67b4ebe273eeed
- MD5 a4562bae1c4c5f34d164f195da28f708
- SHA1 55658d1ab4e5ae706fcd3cb0d59d423642611a25
- SHA512 3555e039a37dcf86dd62f4c19b331e5ddfd92b9f5e599cfb6008cf382f0ca72b1e10b471d5243bed5a17258a64219e1b95b6a8e70c81861235a43d89d1fc5bb4
- SSDEEP 196608:HVmj5VjxdhmHpn6F44IAWvXdo5dMHdRd3jYddj1:Hw/1mHN6+Jrv70p
- TLSH T1C3D66B1172E655F8E0BF91358A768731D6767C134E30838F13ACDA5A2E73690AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory