General
- Target 2026-08-14_ef7ca814f3a0fe41316314bffd0ba880_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 16.4MB
- Sample260814-ldevqazfkh
- SHA256 b70d69addef735bc3fff5c4a30d8d21b28c4e7788fc2a5a13b7dda3035382007
- MD5 ef7ca814f3a0fe41316314bffd0ba880
- SHA1 00e9773f50b2f420ced74fc05e3cfdfa9244e42f
- SHA512 9c0a4e0ccf8cac46525a21b6b5cbc4b4a551ca88bc2f7f4c1d908431d50eb504068e4a92c1a059965757e73c5cbb07651ff0cd47ef9b1ec2d3afba091fec9a54
- SSDEEP 196608:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bAmHpn6F44IAWv1dBjwjqjwd+:H6IbUwF1VERmj2bAmHN6+JrvFUOb
- TLSH T10D07AD5162E665F8E0BF91358A358731E6727C134E31838F13BCDA5A2F73650AD29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_ef7ca814f3a0fe41316314bffd0ba880_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_ef7ca814f3a0fe41316314bffd0ba880_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_ef7ca814f3a0fe41316314bffd0ba880_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 16.4MB
- SHA256 b70d69addef735bc3fff5c4a30d8d21b28c4e7788fc2a5a13b7dda3035382007
- MD5 ef7ca814f3a0fe41316314bffd0ba880
- SHA1 00e9773f50b2f420ced74fc05e3cfdfa9244e42f
- SHA512 9c0a4e0ccf8cac46525a21b6b5cbc4b4a551ca88bc2f7f4c1d908431d50eb504068e4a92c1a059965757e73c5cbb07651ff0cd47ef9b1ec2d3afba091fec9a54
- SSDEEP 196608:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bAmHpn6F44IAWv1dBjwjqjwd+:H6IbUwF1VERmj2bAmHN6+JrvFUOb
- TLSH T10D07AD5162E665F8E0BF91358A358731E6727C134E31838F13BCDA5A2F73650AD29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory