General
- Target 2026-09-16_da6dcb4e6a1053aae266d3061e93ecbe_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- Sample260916-tx2slashkh
- SHA256 c4c033a2135302ad4b21513b1a6e39189a4ae0dc6d6b15abc2f239416c3617ff
- MD5 da6dcb4e6a1053aae266d3061e93ecbe
- SHA1 37dd3544bb0733e0cef831c0fc8cf03f354c46bd
- SHA512 c8dacdf6b41a560cab9507ea3c5736f607b2a4130fe847a7ce4d2c84c3cf45b06fc3bc00cbdeb691468dac9c098b9cad1f6952e57864eb01ea76b35041432250
- SSDEEP 6144:DXzKdNY49u8rV69V37voBSXNn2qN401netO:8a4A7jvnNI01l
- TLSH T1A2548C636E495901FB324F3805A367EE7A95FE42249F755B10C5B24E32B7293120BA3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-16_da6dcb4e6a1053aae266d3061e93ecbe_cobalt-strike_coinminer_conti_elex_hijackloader.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-16_da6dcb4e6a1053aae266d3061e93ecbe_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- SHA256 c4c033a2135302ad4b21513b1a6e39189a4ae0dc6d6b15abc2f239416c3617ff
- MD5 da6dcb4e6a1053aae266d3061e93ecbe
- SHA1 37dd3544bb0733e0cef831c0fc8cf03f354c46bd
- SHA512 c8dacdf6b41a560cab9507ea3c5736f607b2a4130fe847a7ce4d2c84c3cf45b06fc3bc00cbdeb691468dac9c098b9cad1f6952e57864eb01ea76b35041432250
- SSDEEP 6144:DXzKdNY49u8rV69V37voBSXNn2qN401netO:8a4A7jvnNI01l
- TLSH T1A2548C636E495901FB324F3805A367EE7A95FE42249F755B10C5B24E32B7293120BA3F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.