General
- Target 2026-10-11_7ecb3f10456d8c6f91df8a33254861e5_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- Sample261012-wap7dsywhy
- SHA256 ef4f4e67314d5314ee9e96e9a696101670efe92550a5e9c78c891fd27374abcd
- MD5 7ecb3f10456d8c6f91df8a33254861e5
- SHA1 724f1278ccc6f2ba827903d96416fc4f9b179c44
- SHA512 3fccdef6736dfea5414df64b642ff08f4d5cf30e68938c961f0c3cdc4c879ea3617b3a783b5cee6fc36139a2897c30feca963e8603229716e2f2fd47a88e9f41
- SSDEEP 3072:dNXEGZJWhfNFC4S60+XoLczrVmXwnywJoxZyVAYdfiQrImF+lASgnv3Ih1NTSvFG:bXzKdNY49u8rVFJm/ASgv3IXNG01netQ
- TLSH T10C548C636E495901FB364F3815A367EDBAA5EF41249F354B10C5B24E32B7293120BA3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-11_7ecb3f10456d8c6f91df8a33254861e5_cobalt-strike_coinminer_conti_elex_hijackloader.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_7ecb3f10456d8c6f91df8a33254861e5_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- SHA256 ef4f4e67314d5314ee9e96e9a696101670efe92550a5e9c78c891fd27374abcd
- MD5 7ecb3f10456d8c6f91df8a33254861e5
- SHA1 724f1278ccc6f2ba827903d96416fc4f9b179c44
- SHA512 3fccdef6736dfea5414df64b642ff08f4d5cf30e68938c961f0c3cdc4c879ea3617b3a783b5cee6fc36139a2897c30feca963e8603229716e2f2fd47a88e9f41
- SSDEEP 3072:dNXEGZJWhfNFC4S60+XoLczrVmXwnywJoxZyVAYdfiQrImF+lASgnv3Ih1NTSvFG:bXzKdNY49u8rVFJm/ASgv3IXNG01netQ
- TLSH T10C548C636E495901FB364F3815A367EDBAA5EF41249F354B10C5B24E32B7293120BA3F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.