General
- Target 2026-08-31_1f5382515b3a3e9a2b6f2c02f0a380c2_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.7MB
- Sample260831-2ch4rasxcv
- SHA256 d2ced5b54be287189b71dff877f83503126fc9f958dbc43c3db16c78f6fb7bca
- MD5 1f5382515b3a3e9a2b6f2c02f0a380c2
- SHA1 1178240eaf8fa47dedcd6b5670a95169f5235f78
- SHA512 0ab5f8aa9d2975f44e1784c436a921acefa9315a5cc8f52d4c131a197632f9882996e9818c18e75ac441554a85acb107e021cb1466f69a1b5952ee73f24065f6
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdKdbbsdF7:HGIbUwF1VERmj2br
- TLSH T137D6D00173E48075F1B36A35CEBA9725997A7C615F34C28F1398166E0E726D0EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-31_1f5382515b3a3e9a2b6f2c02f0a380c2_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_1f5382515b3a3e9a2b6f2c02f0a380c2_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_1f5382515b3a3e9a2b6f2c02f0a380c2_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.7MB
- SHA256 d2ced5b54be287189b71dff877f83503126fc9f958dbc43c3db16c78f6fb7bca
- MD5 1f5382515b3a3e9a2b6f2c02f0a380c2
- SHA1 1178240eaf8fa47dedcd6b5670a95169f5235f78
- SHA512 0ab5f8aa9d2975f44e1784c436a921acefa9315a5cc8f52d4c131a197632f9882996e9818c18e75ac441554a85acb107e021cb1466f69a1b5952ee73f24065f6
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdKdbbsdF7:HGIbUwF1VERmj2br
- TLSH T137D6D00173E48075F1B36A35CEBA9725997A7C615F34C28F1398166E0E726D0EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory