General
- Target 2026-09-24_5a0ec4e0a66fe4f5451768ef178cf92a_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- Sample260925-k7eldat16m
- SHA256 8bcce2c0ed5ddc6b7af1d77038312e3606e93c676f66e252621ae9b30971dea2
- MD5 5a0ec4e0a66fe4f5451768ef178cf92a
- SHA1 105de5603dea72d11ba278c1dc56bd330aaac6f9
- SHA512 c85d6f9652ddbbe872636f4d02111db9957ca486d4c2f0cb3033dc0240109255059a406b22bf3b53347548c6b862edfcc523e7ec6e1e55cc8d617e79cb9ac302
- SSDEEP 6144:FXzKdNY49u8rVdaKCDxifVEoSErq01netl:2a4A3v+Vi01y
- TLSH T1E2548C636E495901FB324F3805A367ED7AA6FE02249F755B10C5B24E32B7293120B97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-24_5a0ec4e0a66fe4f5451768ef178cf92a_cobalt-strike_coinminer_conti_elex_hijackloader.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_5a0ec4e0a66fe4f5451768ef178cf92a_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- SHA256 8bcce2c0ed5ddc6b7af1d77038312e3606e93c676f66e252621ae9b30971dea2
- MD5 5a0ec4e0a66fe4f5451768ef178cf92a
- SHA1 105de5603dea72d11ba278c1dc56bd330aaac6f9
- SHA512 c85d6f9652ddbbe872636f4d02111db9957ca486d4c2f0cb3033dc0240109255059a406b22bf3b53347548c6b862edfcc523e7ec6e1e55cc8d617e79cb9ac302
- SSDEEP 6144:FXzKdNY49u8rVdaKCDxifVEoSErq01netl:2a4A3v+Vi01y
- TLSH T1E2548C636E495901FB324F3805A367ED7AA6FE02249F755B10C5B24E32B7293120B97F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.