General
- Target 2026-08-21_4cc17e8d86ed9910739a2914e07a40a6_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- Sample260822-stl3ashn2s
- SHA256 820a1b4da0be29189eb8e04e405f68c6c8228138074cca2a01916ee22bc5c3fd
- MD5 4cc17e8d86ed9910739a2914e07a40a6
- SHA1 f395581a12e2913efb03a6062eded1c334ecd13c
- SHA512 31e4b9561e882524b6c8fe566e67e4be8f7dbc93b84cf7f94ae3e587ba1ba2207dce6822f555b34ac2eebd08b37c31a9b67889a586167171474c560a86ff9cff
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdKdbNdD:HGIbUwF1VERmj2bg
- TLSH T1C7D6D00173E48075F1F36B35CEBA96219A7A7C629F34D24F1398561D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_4cc17e8d86ed9910739a2914e07a40a6_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_4cc17e8d86ed9910739a2914e07a40a6_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_4cc17e8d86ed9910739a2914e07a40a6_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- SHA256 820a1b4da0be29189eb8e04e405f68c6c8228138074cca2a01916ee22bc5c3fd
- MD5 4cc17e8d86ed9910739a2914e07a40a6
- SHA1 f395581a12e2913efb03a6062eded1c334ecd13c
- SHA512 31e4b9561e882524b6c8fe566e67e4be8f7dbc93b84cf7f94ae3e587ba1ba2207dce6822f555b34ac2eebd08b37c31a9b67889a586167171474c560a86ff9cff
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdKdbNdD:HGIbUwF1VERmj2bg
- TLSH T1C7D6D00173E48075F1F36B35CEBA96219A7A7C629F34D24F1398561D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory