General
- Target 2026-10-11_98c530e94cdbfa5300bdadf5589920de_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- Sample261012-sq76csdh97
- SHA256 aa1b111f5800d27c835f04e19d492f984f2c4c81fa15b5306fed275e684ed424
- MD5 98c530e94cdbfa5300bdadf5589920de
- SHA1 205ffa5a47747bc1e17ca5e7adbe66b071cb40de
- SHA512 38e56b7633de27d3910399dde860d75b80e6d6406619c2803893bcaff5635f42ccdc9e9f506e02ffea651579fe37ff54bc0947a618eace4496116d5de746784e
- SSDEEP 6144:MXzKdNY49u8rVHwmdB7Les+eFMBxI901net5:Da4A8Bu/eF+e01W
- TLSH T16D548C236E495901FB324F3805A367ED7EA6EF02149F354B10C5B65E72B6293120B97F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-11_98c530e94cdbfa5300bdadf5589920de_cobalt-strike_coinminer_conti_elex_hijackloader.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_98c530e94cdbfa5300bdadf5589920de_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- SHA256 aa1b111f5800d27c835f04e19d492f984f2c4c81fa15b5306fed275e684ed424
- MD5 98c530e94cdbfa5300bdadf5589920de
- SHA1 205ffa5a47747bc1e17ca5e7adbe66b071cb40de
- SHA512 38e56b7633de27d3910399dde860d75b80e6d6406619c2803893bcaff5635f42ccdc9e9f506e02ffea651579fe37ff54bc0947a618eace4496116d5de746784e
- SSDEEP 6144:MXzKdNY49u8rVHwmdB7Les+eFMBxI901net5:Da4A8Bu/eF+e01W
- TLSH T16D548C236E495901FB324F3805A367ED7EA6EF02149F354B10C5B65E72B6293120B97F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.