General

  • Target
    2026-09-03_ea722b1c5359e28f80efc4f9ed956e44_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
  • Size 24.2MB
  • Sample260903-yeb7fabd66
  • SHA256 22c4d3158f6eade049da5f0eda422e82d50fb688f77421a483d2dd20d4c5bfc4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-03_ea722b1c5359e28f80efc4f9ed956e44_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
    • Size 24.2MB
    • SHA256 22c4d3158f6eade049da5f0eda422e82d50fb688f77421a483d2dd20d4c5bfc4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies WinLogon for persistence

    • UPX dump on OEP (original entry point)

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks