General
- Target 2026-09-20_efa98e87ffdd80b6452655a310e6fb9a_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.2MB
- Sample260920-2pgrfsdf58
- SHA256 736effc950d6f85ba62e9c3244d0f444c8eb88b0f5fbae6089f04f4f341ab7ce
- MD5 efa98e87ffdd80b6452655a310e6fb9a
- SHA1 238e55e9b42697654938e9b5adea9c9aff6318fe
- SHA512 d0b37857be3cded3037f602b1edc523198d9a625f6e6faf3f9ea6b5d4899f580dd76d60241fbceeddf57bd3ea49c6aae629598a6e5aa683c82b82f38ab894aa8
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdMdt3d6Ek1:HGIbUwF1VERmj2b1
- TLSH T172D6CF0177E48075F1F36B358EBA96219A7A7C629F34C24F13D8165D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-20_efa98e87ffdd80b6452655a310e6fb9a_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-20_efa98e87ffdd80b6452655a310e6fb9a_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njr.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-20_efa98e87ffdd80b6452655a310e6fb9a_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.2MB
- SHA256 736effc950d6f85ba62e9c3244d0f444c8eb88b0f5fbae6089f04f4f341ab7ce
- MD5 efa98e87ffdd80b6452655a310e6fb9a
- SHA1 238e55e9b42697654938e9b5adea9c9aff6318fe
- SHA512 d0b37857be3cded3037f602b1edc523198d9a625f6e6faf3f9ea6b5d4899f580dd76d60241fbceeddf57bd3ea49c6aae629598a6e5aa683c82b82f38ab894aa8
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdMdt3d6Ek1:HGIbUwF1VERmj2b1
- TLSH T172D6CF0177E48075F1F36B358EBA96219A7A7C629F34C24F13D8165D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory