General
- Target 2026-08-12_4e46c113054906c78572e9650990aa81_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 10.6MB
- Sample260813-bk7tzagb23
- SHA256 5a9a4402bdbb6f0a6f9edd428c897bf6631dacaa25548bdc37e092f926d51b73
- MD5 4e46c113054906c78572e9650990aa81
- SHA1 d66adf5e8451d56d050b4999a322d3719c482311
- SHA512 934e0a5448ad64229d7770eb994a0978ad39d29eab6129e5e7f2932f3d2b21ae786242ebb25ed3e8b32e3608ad5637e4ea2262ef90201f73416f8bc4234c8929
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bkdEdL:HGIbUwF1VERmj2bB
- TLSH T188B6E11177E08075F1B36635CABA9725D97A7C215F34D28F1398466E0E32790EE3AB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-12_4e46c113054906c78572e9650990aa81_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_4e46c113054906c78572e9650990aa81_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_4e46c113054906c78572e9650990aa81_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 10.6MB
- SHA256 5a9a4402bdbb6f0a6f9edd428c897bf6631dacaa25548bdc37e092f926d51b73
- MD5 4e46c113054906c78572e9650990aa81
- SHA1 d66adf5e8451d56d050b4999a322d3719c482311
- SHA512 934e0a5448ad64229d7770eb994a0978ad39d29eab6129e5e7f2932f3d2b21ae786242ebb25ed3e8b32e3608ad5637e4ea2262ef90201f73416f8bc4234c8929
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bkdEdL:HGIbUwF1VERmj2bB
- TLSH T188B6E11177E08075F1B36635CABA9725D97A7C215F34D28F1398466E0E32790EE3AB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory