General
- Target 2026-09-16_5489e3b152dc070387f167374f3d239e_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- Sample260916-1edrdafq81
- SHA256 ca1a21fe89eefba0e296ab3db3084ffb851f61b7de12e596687f781459327d22
- MD5 5489e3b152dc070387f167374f3d239e
- SHA1 c6b7724150bf38f825ea8812527a94557fb1e7f0
- SHA512 e352c3e27bb4f2eb5bfd551be280203180bfe21fdf0afe8a457a00e6ce2a6a54db6bff44731095e8b8eba51e890d85b5294154cff42622533c75e3ef565e95d5
- SSDEEP 6144:+XzKdNY49u8rVUHj+UFkkQNltmkIg01netA:Fa4AxB/YlXF01r
- TLSH T169548C236E496901FB364F3805A367EDBA96FE41249F755B00C5B25E32B7293120B93F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-16_5489e3b152dc070387f167374f3d239e_cobalt-strike_coinminer_conti_elex_hijackloader.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_5489e3b152dc070387f167374f3d239e_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- SHA256 ca1a21fe89eefba0e296ab3db3084ffb851f61b7de12e596687f781459327d22
- MD5 5489e3b152dc070387f167374f3d239e
- SHA1 c6b7724150bf38f825ea8812527a94557fb1e7f0
- SHA512 e352c3e27bb4f2eb5bfd551be280203180bfe21fdf0afe8a457a00e6ce2a6a54db6bff44731095e8b8eba51e890d85b5294154cff42622533c75e3ef565e95d5
- SSDEEP 6144:+XzKdNY49u8rVUHj+UFkkQNltmkIg01netA:Fa4AxB/YlXF01r
- TLSH T169548C236E496901FB364F3805A367EDBA96FE41249F755B00C5B25E32B7293120B93F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.