General
- Target 2026-08-20_79fc1de3a15bbfb9d73e8bb75d277480_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.5MB
- Sample260821-dbs1ka1fmd
- SHA256 094a5a451c1c0eafb718b05e87a68180c7bfb55d106322b46abb93407e02b525
- MD5 79fc1de3a15bbfb9d73e8bb75d277480
- SHA1 19b74f867994687aabd3cc07f1316dbe0055e98f
- SHA512 e97831883f9b8e349b52c048cabd894c9dd5c0f5521add7cb072ec96c3b1403f4318e63754156c256fe783a9986804c36565ef62534e608e325599651c35b88c
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdrM:HGIbUwF1VERmj2bG
- TLSH T1B9C6D00177E48075F1B36B358EBA97259A7A7C629F34C28F1388161D0E726D0EA35B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_79fc1de3a15bbfb9d73e8bb75d277480_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_79fc1de3a15bbfb9d73e8bb75d277480_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_79fc1de3a15bbfb9d73e8bb75d277480_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.5MB
- SHA256 094a5a451c1c0eafb718b05e87a68180c7bfb55d106322b46abb93407e02b525
- MD5 79fc1de3a15bbfb9d73e8bb75d277480
- SHA1 19b74f867994687aabd3cc07f1316dbe0055e98f
- SHA512 e97831883f9b8e349b52c048cabd894c9dd5c0f5521add7cb072ec96c3b1403f4318e63754156c256fe783a9986804c36565ef62534e608e325599651c35b88c
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdrM:HGIbUwF1VERmj2bG
- TLSH T1B9C6D00177E48075F1B36B358EBA97259A7A7C629F34C28F1388161D0E726D0EA35B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory