General
- Target 2026-08-19_fd5aecf42cb38bf3b429f4a3a4777c5f_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.0MB
- Sample260819-d9krvawcma
- SHA256 a24dcf55ccd7d63eb00a3264ffbfad6a62f3e938990fb9d90456d5a45574d126
- MD5 fd5aecf42cb38bf3b429f4a3a4777c5f
- SHA1 f409cf9066eb8b0b8d76a6def885838b35b578a6
- SHA512 b9a51c032483d8d75917fe0c7bb661301f75085c6e1f4a503d05ec5f1a4767616336d08735b27ff0b9c2c7a25193cd95433f5ad001673b57199204776bca90bf
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLda:HGIbUwF1VERmj2bk
- TLSH T11CC6E00177E48075F1F36B358EBA96259A7A7C629F34C24F13D8161D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-19_fd5aecf42cb38bf3b429f4a3a4777c5f_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_fd5aecf42cb38bf3b429f4a3a4777c5f_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_fd5aecf42cb38bf3b429f4a3a4777c5f_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.0MB
- SHA256 a24dcf55ccd7d63eb00a3264ffbfad6a62f3e938990fb9d90456d5a45574d126
- MD5 fd5aecf42cb38bf3b429f4a3a4777c5f
- SHA1 f409cf9066eb8b0b8d76a6def885838b35b578a6
- SHA512 b9a51c032483d8d75917fe0c7bb661301f75085c6e1f4a503d05ec5f1a4767616336d08735b27ff0b9c2c7a25193cd95433f5ad001673b57199204776bca90bf
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLda:HGIbUwF1VERmj2bk
- TLSH T11CC6E00177E48075F1F36B358EBA96259A7A7C629F34C24F13D8161D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory