General

  • Target
    2026-10-05_688bd675b3a5c9737f46a5b5507aadd7_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
  • Size 11.4MB
  • Sample261006-2payxaxt4j
  • SHA256 c392c4ff27eaff5288839884595fcea214b6ade0a8ba4a7b8bd45f9dfcb4d62c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-10-05_688bd675b3a5c9737f46a5b5507aadd7_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
    • Size 11.4MB
    • SHA256 c392c4ff27eaff5288839884595fcea214b6ade0a8ba4a7b8bd45f9dfcb4d62c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies WinLogon for persistence

    • UPX dump on OEP (original entry point)

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks