General
- Target 2026-08-18_a3bf435c3ca433be09f7559751db48b7_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.0MB
- Sample260818-28eq7sap9v
- SHA256 c43f9a9bf9006983210f78011039109f20e0bd05be66547158691c120394ce92
- MD5 a3bf435c3ca433be09f7559751db48b7
- SHA1 64690c02e976c112d1eb89c1f9854d1789047b8a
- SHA512 327782ebee9a88f25525157db87fd8bd8acd360fab3934b0cbbfe1d182da37195b348e8c028f63f9b3d6d517c00e95bf153c361504a5186d07200fa7aaf75dd9
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdk:HGIbUwF1VERmj2b2
- TLSH T1BAC6E00177E48075F1F36B358EBA96259A7A7C629F34C24F13D8161D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-18_a3bf435c3ca433be09f7559751db48b7_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_a3bf435c3ca433be09f7559751db48b7_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_a3bf435c3ca433be09f7559751db48b7_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.0MB
- SHA256 c43f9a9bf9006983210f78011039109f20e0bd05be66547158691c120394ce92
- MD5 a3bf435c3ca433be09f7559751db48b7
- SHA1 64690c02e976c112d1eb89c1f9854d1789047b8a
- SHA512 327782ebee9a88f25525157db87fd8bd8acd360fab3934b0cbbfe1d182da37195b348e8c028f63f9b3d6d517c00e95bf153c361504a5186d07200fa7aaf75dd9
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdk:HGIbUwF1VERmj2b2
- TLSH T1BAC6E00177E48075F1F36B358EBA96259A7A7C629F34C24F13D8161D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory