General
- Target 2026-08-23_5a9c537ec795b1f463f72fcf49381e0b_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 18.3MB
- Sample260824-m8n8basvay
- SHA256 ef6ee33398374d670ef15ba58b4628fff44daf555a21b1776d976041f993c718
- MD5 5a9c537ec795b1f463f72fcf49381e0b
- SHA1 420c29bb371c83f8bdb109ce20b64a7520aea316
- SHA512 09fe953f566a5f8f8b00712371afa779c429065108cb9cfbda4ae6c15ffe6d7b74353c60cea0f467a614c460d87566a521c826ebad494a8d9fc2a84815d35ab3
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdpd2mHpn6F44IAWvmdF:HGIbUwF1VERmj2bUmHN6+Jrv4
- TLSH T13817BE5172E650F8E0BBA6358A7A8731E6727C134A31930F13ACD65A1F73650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_5a9c537ec795b1f463f72fcf49381e0b_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_5a9c537ec795b1f463f72fcf49381e0b_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_5a9c537ec795b1f463f72fcf49381e0b_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 18.3MB
- SHA256 ef6ee33398374d670ef15ba58b4628fff44daf555a21b1776d976041f993c718
- MD5 5a9c537ec795b1f463f72fcf49381e0b
- SHA1 420c29bb371c83f8bdb109ce20b64a7520aea316
- SHA512 09fe953f566a5f8f8b00712371afa779c429065108cb9cfbda4ae6c15ffe6d7b74353c60cea0f467a614c460d87566a521c826ebad494a8d9fc2a84815d35ab3
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdpd2mHpn6F44IAWvmdF:HGIbUwF1VERmj2bUmHN6+Jrv4
- TLSH T13817BE5172E650F8E0BBA6358A7A8731E6727C134A31930F13ACD65A1F73650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory