General
- Target 2026-09-23_d7659852d2f4b985611a16280ab61e89_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- Sample260924-bentxaae38
- SHA256 39b48e40e935276c8fc3680699bfbb7a767bf63efb005daa127a51f696b267e8
- MD5 d7659852d2f4b985611a16280ab61e89
- SHA1 3a19991235a6214030894135bdaa44f1a946f0e3
- SHA512 262be48a3acbb2aa9f0abade87f2d0e624f99802f1b2f049c84cc2a0363d204c92113c31b2623708c9fbcc05891a6a5789f870497ecf26ed03ae5db30c816d7b
- SSDEEP 3072:WNXEGZJWhfNFC4S60+XoLczrVmXepC1QHjS+/fbC8DcGsXtH01ne4PKzx3:kXzKdNY49u8rV7NjLHu8DcGS101netN
- TLSH T1FB548B236E495901FB328F3815A367EDBEA5BE41149F314B10C5B65E32B7293120BA7F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-23_d7659852d2f4b985611a16280ab61e89_cobalt-strike_coinminer_conti_elex_hijackloader.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-23_d7659852d2f4b985611a16280ab61e89_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- SHA256 39b48e40e935276c8fc3680699bfbb7a767bf63efb005daa127a51f696b267e8
- MD5 d7659852d2f4b985611a16280ab61e89
- SHA1 3a19991235a6214030894135bdaa44f1a946f0e3
- SHA512 262be48a3acbb2aa9f0abade87f2d0e624f99802f1b2f049c84cc2a0363d204c92113c31b2623708c9fbcc05891a6a5789f870497ecf26ed03ae5db30c816d7b
- SSDEEP 3072:WNXEGZJWhfNFC4S60+XoLczrVmXepC1QHjS+/fbC8DcGsXtH01ne4PKzx3:kXzKdNY49u8rV7NjLHu8DcGS101netN
- TLSH T1FB548B236E495901FB328F3815A367EDBEA5BE41149F314B10C5B65E32B7293120BA7F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.