General
- Target 2026-08-21_f4fa50f18d3700b258e2d51a8ec6d7bf_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 25.5MB
- Sample260822-addf4sdr4z
- SHA256 56352255689ee2e1e82aca40976d3974b08ff31c74b7363b504f8aeb826f15ed
- MD5 f4fa50f18d3700b258e2d51a8ec6d7bf
- SHA1 92319a8e4a098eed063324ac9f49e83599d49619
- SHA512 bb371f2d68907e73514bbe61ae657105de86f4f1b1f367e097447d0ee141cf1bafcdd4b9c02503191e12bcb35d1a176bfbb1abb5e263d68f1c672a2cc3d8d5b9
- SSDEEP 393216:Hw/1mHN6+Jrv7OImHN6+JrvFmHN6+Jrvl:HhbrIbrgbrN
- TLSH T13C475A6162E761FCE0BFD1398A3A8731E6727C130A31934F12BCD65A2F636546D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_f4fa50f18d3700b258e2d51a8ec6d7bf_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_f4fa50f18d3700b258e2d51a8ec6d7bf_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_f4fa50f18d3700b258e2d51a8ec6d7bf_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 25.5MB
- SHA256 56352255689ee2e1e82aca40976d3974b08ff31c74b7363b504f8aeb826f15ed
- MD5 f4fa50f18d3700b258e2d51a8ec6d7bf
- SHA1 92319a8e4a098eed063324ac9f49e83599d49619
- SHA512 bb371f2d68907e73514bbe61ae657105de86f4f1b1f367e097447d0ee141cf1bafcdd4b9c02503191e12bcb35d1a176bfbb1abb5e263d68f1c672a2cc3d8d5b9
- SSDEEP 393216:Hw/1mHN6+Jrv7OImHN6+JrvFmHN6+Jrvl:HhbrIbrgbrN
- TLSH T13C475A6162E761FCE0BFD1398A3A8731E6727C130A31934F12BCD65A2F636546D29723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory