General
- Target 2026-09-16_ff3d4489b5432143f3f957d6c72507d9_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- Sample260916-sd48yacn5y
- SHA256 541c669b1e0fabd6737525bc77d53083bcc6fa0a8584ba606f0d30e260e2a5c8
- MD5 ff3d4489b5432143f3f957d6c72507d9
- SHA1 08005a56510a4af78d1647c8a9d1cdda1b1241cf
- SHA512 d3b7760b09c0d8fb1e84856b0030126fb69d57e056d93b27718b3f2ba9ecca6b1229a198ffd79b5d94ae5af24b472e3eab799a76f59d411bab545f863f243062
- SSDEEP 6144:KXzKdNY49u8rVQaFdw+atfHcHx1SFe801netc:Ja4AmjatfHuxAt01b
- TLSH T117547C636E495900FB324F3805A367EDBEA6BF02249F754B10C5B15E32B6693120B97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-16_ff3d4489b5432143f3f957d6c72507d9_cobalt-strike_coinminer_conti_elex_hijackloader.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_ff3d4489b5432143f3f957d6c72507d9_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- SHA256 541c669b1e0fabd6737525bc77d53083bcc6fa0a8584ba606f0d30e260e2a5c8
- MD5 ff3d4489b5432143f3f957d6c72507d9
- SHA1 08005a56510a4af78d1647c8a9d1cdda1b1241cf
- SHA512 d3b7760b09c0d8fb1e84856b0030126fb69d57e056d93b27718b3f2ba9ecca6b1229a198ffd79b5d94ae5af24b472e3eab799a76f59d411bab545f863f243062
- SSDEEP 6144:KXzKdNY49u8rVQaFdw+atfHcHx1SFe801netc:Ja4AmjatfHuxAt01b
- TLSH T117547C636E495900FB324F3805A367EDBEA6BF02249F754B10C5B15E32B6693120B97F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.