General
- Target 2026-09-22_2b55aec8a82b71cfd54052ecfcbee264_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- Sample260922-1jmj3sshjg
- SHA256 d5c004f7dfbe24be0c6de134181f3b0d10c659bb1235f99383ef6597446a05d0
- MD5 2b55aec8a82b71cfd54052ecfcbee264
- SHA1 c35c10ca555b99337e9c2f6166c417d91650032d
- SHA512 58b4afbf9cf6b13ff8579414210fb8b065aa1c265f4c95e2e3e26ee4e07fa9552642d182cfd1ff1f6527c4e20510a5b68a161e333276d29f26d999841e3e19a6
- SSDEEP 3072:rNXEGZJWhfNFC4S60+XoLczrVmXJpu2aGfZNL+C5LYZNO5McAx9LcinH01ne4PKe:xXzKdNY49u8rV8TMi5McwL01nete
- TLSH T184547C236E495901FB364E3815A367EE7EA6FE41249F354B10C5B25E32B72931207A3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-22_2b55aec8a82b71cfd54052ecfcbee264_cobalt-strike_coinminer_conti_elex_hijackloader.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-22_2b55aec8a82b71cfd54052ecfcbee264_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- SHA256 d5c004f7dfbe24be0c6de134181f3b0d10c659bb1235f99383ef6597446a05d0
- MD5 2b55aec8a82b71cfd54052ecfcbee264
- SHA1 c35c10ca555b99337e9c2f6166c417d91650032d
- SHA512 58b4afbf9cf6b13ff8579414210fb8b065aa1c265f4c95e2e3e26ee4e07fa9552642d182cfd1ff1f6527c4e20510a5b68a161e333276d29f26d999841e3e19a6
- SSDEEP 3072:rNXEGZJWhfNFC4S60+XoLczrVmXJpu2aGfZNL+C5LYZNO5McAx9LcinH01ne4PKe:xXzKdNY49u8rV8TMi5McwL01nete
- TLSH T184547C236E495901FB364E3815A367EE7EA6FE41249F354B10C5B25E32B72931207A3F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.