General
- Target 2026-08-19_db65ffdd982bfad80963f512623f2d3c_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 13.4MB
- Sample260819-3s3zjaywbs
- SHA256 684b89232de8f7b7a1d8d4271dd9cfd6a6ac8a37387d524b55b7173406f42131
- MD5 db65ffdd982bfad80963f512623f2d3c
- SHA1 2a1cb0f5e98e63b32a2d1d406dda0a9440fb3ac3
- SHA512 d650e326a012d163de7dd9bab773f6a3206502798cefca8156d365720e8d92872b22a9bb1394aa1ee0136d6c733e75315936c3af0a1272226df7ee740c47aa69
- SSDEEP 196608:HVmj5VjxdhmHpn6F44IAWvXdo5dMHdRd3jCjBdlji:Hw/1mHN6+Jrv7OhW
- TLSH T124E66B1172E655F8E0BF91358A768731D6767C124E30838F13ACDA5A2F73690AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-19_db65ffdd982bfad80963f512623f2d3c_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_db65ffdd982bfad80963f512623f2d3c_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_db65ffdd982bfad80963f512623f2d3c_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 13.4MB
- SHA256 684b89232de8f7b7a1d8d4271dd9cfd6a6ac8a37387d524b55b7173406f42131
- MD5 db65ffdd982bfad80963f512623f2d3c
- SHA1 2a1cb0f5e98e63b32a2d1d406dda0a9440fb3ac3
- SHA512 d650e326a012d163de7dd9bab773f6a3206502798cefca8156d365720e8d92872b22a9bb1394aa1ee0136d6c733e75315936c3af0a1272226df7ee740c47aa69
- SSDEEP 196608:HVmj5VjxdhmHpn6F44IAWvXdo5dMHdRd3jCjBdlji:Hw/1mHN6+Jrv7OhW
- TLSH T124E66B1172E655F8E0BF91358A768731D6767C124E30838F13ACDA5A2F73690AD39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory