General
- Target 2026-08-20_9aae246ece2fe8226bd5542ba3705b57_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 16.1MB
- Sample260821-c7bkqa1epe
- SHA256 c88e6f53149c5abf66f771ce7c1cbfeb4fa68bbc310f1e7bfbfa60e13df1615a
- MD5 9aae246ece2fe8226bd5542ba3705b57
- SHA1 0ef7222733282c727817790b94147c7ae158688e
- SHA512 4aac32a3bc05b09e59afa13950074d8e92455666dffa698feed6b0c5a9eb191bb53a59e5cba33f9bd4fbbb44e54cb7caf7a0edd4c938e994b53e8b58b11927c6
- SSDEEP 196608:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bAmHpn6F44IAWv1dBjZ1dJd2:H6IbUwF1VERmj2bAmHN6+JrvFA
- TLSH T10B07BE5162E660F9E0BFE1398A768731E6727C130A31934F13BCD65A2F636506D29B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_9aae246ece2fe8226bd5542ba3705b57_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_9aae246ece2fe8226bd5542ba3705b57_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_9aae246ece2fe8226bd5542ba3705b57_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 16.1MB
- SHA256 c88e6f53149c5abf66f771ce7c1cbfeb4fa68bbc310f1e7bfbfa60e13df1615a
- MD5 9aae246ece2fe8226bd5542ba3705b57
- SHA1 0ef7222733282c727817790b94147c7ae158688e
- SHA512 4aac32a3bc05b09e59afa13950074d8e92455666dffa698feed6b0c5a9eb191bb53a59e5cba33f9bd4fbbb44e54cb7caf7a0edd4c938e994b53e8b58b11927c6
- SSDEEP 196608:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bAmHpn6F44IAWv1dBjZ1dJd2:H6IbUwF1VERmj2bAmHN6+JrvFA
- TLSH T10B07BE5162E660F9E0BFE1398A768731E6727C130A31934F13BCD65A2F636506D29B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory