General
- Target 2026-09-04_bea638cf982dfaf24bd5e5d637ae6dc1_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.8MB
- Sample260904-2spapsar9w
- SHA256 f3b4a65059a77ba1dc4b9c0160100fe4be38c72bde935691c7ac45cb94604744
- MD5 bea638cf982dfaf24bd5e5d637ae6dc1
- SHA1 d7d97cd09b8699369582b7c15ebce354f4efe01b
- SHA512 ee6fc2c5165c1831a0c99a83dc0c82dc7bde007e7d683cd7448b7c5f8194c591f6e25ba0097f0d99fcc31506ea8a2e0cde0da25a3ca874aee229a126a8617803
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdLdcRdF:HGIbUwF1VERmj2bw
- TLSH T11AD6C00173E48075F1F36B35CEBA96219A7A7C629F35C24F1398561D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-04_bea638cf982dfaf24bd5e5d637ae6dc1_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_bea638cf982dfaf24bd5e5d637ae6dc1_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_bea638cf982dfaf24bd5e5d637ae6dc1_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.8MB
- SHA256 f3b4a65059a77ba1dc4b9c0160100fe4be38c72bde935691c7ac45cb94604744
- MD5 bea638cf982dfaf24bd5e5d637ae6dc1
- SHA1 d7d97cd09b8699369582b7c15ebce354f4efe01b
- SHA512 ee6fc2c5165c1831a0c99a83dc0c82dc7bde007e7d683cd7448b7c5f8194c591f6e25ba0097f0d99fcc31506ea8a2e0cde0da25a3ca874aee229a126a8617803
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdLdcRdF:HGIbUwF1VERmj2bw
- TLSH T11AD6C00173E48075F1F36B35CEBA96219A7A7C629F35C24F1398561D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory