General
- Target 2026-09-12_cb52da05b29ba6ed915b9e33add1b760_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.7MB
- Sample260912-v6lcmsfc32
- SHA256 566e01a82acd922d890d958997b46480bcc21351fd8b682ea0ff11a00ec54903
- MD5 cb52da05b29ba6ed915b9e33add1b760
- SHA1 831d688368034f170207bd271abbcd68496abca5
- SHA512 6832d43f1920bfa50c77fd3977fe08e4ca5ddae85ba759f5344ccd46fd2444735c502de54e042b22d044994d9be43724a3f00de6a3607ea7620feaca4527ae9f
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdgmHpH+d3:HGIbUwF1VERmj2bemHm
- TLSH T158E6C00173E44075F1B3A635CA7A9631EAB67C225F34D34F13D4865E1F736A0AA39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-12_cb52da05b29ba6ed915b9e33add1b760_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_cb52da05b29ba6ed915b9e33add1b760_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_cb52da05b29ba6ed915b9e33add1b760_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.7MB
- SHA256 566e01a82acd922d890d958997b46480bcc21351fd8b682ea0ff11a00ec54903
- MD5 cb52da05b29ba6ed915b9e33add1b760
- SHA1 831d688368034f170207bd271abbcd68496abca5
- SHA512 6832d43f1920bfa50c77fd3977fe08e4ca5ddae85ba759f5344ccd46fd2444735c502de54e042b22d044994d9be43724a3f00de6a3607ea7620feaca4527ae9f
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdgmHpH+d3:HGIbUwF1VERmj2bemHm
- TLSH T158E6C00173E44075F1B3A635CA7A9631EAB67C225F34D34F13D4865E1F736A0AA39B22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory