General
- Target 2026-08-21_495c2e91dfa2f4f662cb93b67338a4f2_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- Sample260822-s3flwahn8z
- SHA256 559d40c4af2149df01fbcc53ad4fe4139c0065c6c48cc2a1425f01c31469a8ce
- MD5 495c2e91dfa2f4f662cb93b67338a4f2
- SHA1 fe11be78c588bb72be0b6f2411d1f54a6cd74461
- SHA512 c8d61720cdc610bcc98aa3c627fc80f2a7124cc86b09c4425dd439b40f5ee03b921daa0654b0ab18d4c42d18aa7265a1bc819ac0587c0b424b5c47bade067ca0
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdKdbbsdK:HGIbUwF1VERmj2bE
- TLSH T116D6D00173E48075F1B36735CEBA97219A7A7C625F34C28F1398565E0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_495c2e91dfa2f4f662cb93b67338a4f2_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_495c2e91dfa2f4f662cb93b67338a4f2_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_495c2e91dfa2f4f662cb93b67338a4f2_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- SHA256 559d40c4af2149df01fbcc53ad4fe4139c0065c6c48cc2a1425f01c31469a8ce
- MD5 495c2e91dfa2f4f662cb93b67338a4f2
- SHA1 fe11be78c588bb72be0b6f2411d1f54a6cd74461
- SHA512 c8d61720cdc610bcc98aa3c627fc80f2a7124cc86b09c4425dd439b40f5ee03b921daa0654b0ab18d4c42d18aa7265a1bc819ac0587c0b424b5c47bade067ca0
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdKdbbsdK:HGIbUwF1VERmj2bE
- TLSH T116D6D00173E48075F1B36735CEBA97219A7A7C625F34C28F1398565E0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory