General
- Target 2026-09-08_c37aa80822b8d3e0a46148b36dd36a83_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 25.9MB
- Sample260908-pptpssztbx
- SHA256 8f81ba3c0f0f7b40d6eefd8d4254a9747e1d23f0ab2334867e659405dc67c601
- MD5 c37aa80822b8d3e0a46148b36dd36a83
- SHA1 ec4e81bc6719d193ddcb9b1c6266b8291531c6f9
- SHA512 943e03ac4e5c0bc6fa1a4ab45090495e8cda7a26c2e15715ac20cbb02c57e6ff6d3425730bc499a67fc15042ccd5959d9c19746fdd2c19eb6ac96d4fd796adac
- SSDEEP 393216:HGIbUwF1VERmj2bemHN6+JrvaRmHN6+JrvS:HGIY092bbbrtbrq
- TLSH T10E578D5162E660FDE0BBD1398A7A8731E6727C130A31934F13BCD65A2F636506D39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-08_c37aa80822b8d3e0a46148b36dd36a83_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_c37aa80822b8d3e0a46148b36dd36a83_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_c37aa80822b8d3e0a46148b36dd36a83_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 25.9MB
- SHA256 8f81ba3c0f0f7b40d6eefd8d4254a9747e1d23f0ab2334867e659405dc67c601
- MD5 c37aa80822b8d3e0a46148b36dd36a83
- SHA1 ec4e81bc6719d193ddcb9b1c6266b8291531c6f9
- SHA512 943e03ac4e5c0bc6fa1a4ab45090495e8cda7a26c2e15715ac20cbb02c57e6ff6d3425730bc499a67fc15042ccd5959d9c19746fdd2c19eb6ac96d4fd796adac
- SSDEEP 393216:HGIbUwF1VERmj2bemHN6+JrvaRmHN6+JrvS:HGIY092bbbrtbrq
- TLSH T10E578D5162E660FDE0BBD1398A7A8731E6727C130A31934F13BCD65A2F636506D39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory