General
- Target 2026-08-17_61548c89f4013dc00b26affe76a1cec9_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 16.1MB
- Sample260818-dvc4fsvfjh
- SHA256 2ad58626b4f3e0b054af4e02f75c71bd03b636ea570a2c885c6f07b9c8e09842
- MD5 61548c89f4013dc00b26affe76a1cec9
- SHA1 1e23f2352494add6b4e1b439cc5205df87485ffc
- SHA512 f73a9b566086045a80d5ce94cc539be687f2ef387ba7a39beb6a62b8aa0b7cd2333652b4963268ddbdc07b9188d55ac4399369677ea49be6ce23b6077f5bb109
- SSDEEP 196608:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bAmHpn6F44IAWv1dBjwjndi:H6IbUwF1VERmj2bAmHN6+JrvFU4
- TLSH T1F307AE5162E661F8E0BFD1398A368731E6727C134A31934F13BCDA5A2F736506D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-17_61548c89f4013dc00b26affe76a1cec9_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_61548c89f4013dc00b26affe76a1cec9_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_61548c89f4013dc00b26affe76a1cec9_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 16.1MB
- SHA256 2ad58626b4f3e0b054af4e02f75c71bd03b636ea570a2c885c6f07b9c8e09842
- MD5 61548c89f4013dc00b26affe76a1cec9
- SHA1 1e23f2352494add6b4e1b439cc5205df87485ffc
- SHA512 f73a9b566086045a80d5ce94cc539be687f2ef387ba7a39beb6a62b8aa0b7cd2333652b4963268ddbdc07b9188d55ac4399369677ea49be6ce23b6077f5bb109
- SSDEEP 196608:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bAmHpn6F44IAWv1dBjwjndi:H6IbUwF1VERmj2bAmHN6+JrvFU4
- TLSH T1F307AE5162E661F8E0BFD1398A368731E6727C134A31934F13BCDA5A2F736506D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory