General
- Target 2026-08-16_322da2c0143ca7680e93f5eabce58714_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 14.4MB
- Sample260816-j45gyscb83
- SHA256 12719c654d0c22304bad297c17ee47699eada0414ba588ad479ea39aa2bf6788
- MD5 322da2c0143ca7680e93f5eabce58714
- SHA1 00c65f95f594d4ccd9e3571d1e7ed3d74f64da2b
- SHA512 c2042f1d1ca8594f573d25fce50b474333d3697482a862b09afc3552a1e5cad09c40da5c4da602a258854c5b479b6da6d5c6821dbe87f19cc722fdf1b6fbf3e6
- SSDEEP 196608:HVmj5Vjxd4jgdBdSmHpn6F44IAWv9jZd3jpd+jIdBjCj3dIdvji:Hw/s9mHN6+Jrv9z6kmA+
- TLSH T130E65B1172E65AF8E1BF913589758731D6777C124E3083CF13ACAA5A3E326906D39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-16_322da2c0143ca7680e93f5eabce58714_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_322da2c0143ca7680e93f5eabce58714_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_322da2c0143ca7680e93f5eabce58714_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 14.4MB
- SHA256 12719c654d0c22304bad297c17ee47699eada0414ba588ad479ea39aa2bf6788
- MD5 322da2c0143ca7680e93f5eabce58714
- SHA1 00c65f95f594d4ccd9e3571d1e7ed3d74f64da2b
- SHA512 c2042f1d1ca8594f573d25fce50b474333d3697482a862b09afc3552a1e5cad09c40da5c4da602a258854c5b479b6da6d5c6821dbe87f19cc722fdf1b6fbf3e6
- SSDEEP 196608:HVmj5Vjxd4jgdBdSmHpn6F44IAWv9jZd3jpd+jIdBjCj3dIdvji:Hw/s9mHN6+Jrv9z6kmA+
- TLSH T130E65B1172E65AF8E1BF913589758731D6777C124E3083CF13ACAA5A3E326906D39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory