General
- Target 2026-10-13_3ee541b7e24cae624680e0aada52b079_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 27.6MB
- Sample261015-srjjdssw3j
- SHA256 3e23b5035f2715c051688a03a5db22342290835de6d31f7b07ac746ff116f8dd
- MD5 3ee541b7e24cae624680e0aada52b079
- SHA1 410c8afc884e261c1f1a243e314219471f84b665
- SHA512 4882eb142546df997fc13b442f8881a3ebbc0a15494adfd79025b85d7a99dd5127fa9b462d75c40e3ec4665496e207aa6003d064a4074470ce940bfc0af2c056
- SSDEEP 393216:HGIbUwF1VERmj2bUmHN6+JrvfmHN6+Jrvf:HGIY092blbr2brH
- TLSH T189579D5162E660F9E0BBE1398A7A8731E6727C130631934F13BCD65A1F63650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-13_3ee541b7e24cae624680e0aada52b079_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_3ee541b7e24cae624680e0aada52b079_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_lu.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_3ee541b7e24cae624680e0aada52b079_cobalt-strike_coinminer_elex_glassworm_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 27.6MB
- SHA256 3e23b5035f2715c051688a03a5db22342290835de6d31f7b07ac746ff116f8dd
- MD5 3ee541b7e24cae624680e0aada52b079
- SHA1 410c8afc884e261c1f1a243e314219471f84b665
- SHA512 4882eb142546df997fc13b442f8881a3ebbc0a15494adfd79025b85d7a99dd5127fa9b462d75c40e3ec4665496e207aa6003d064a4074470ce940bfc0af2c056
- SSDEEP 393216:HGIbUwF1VERmj2bUmHN6+JrvfmHN6+Jrvf:HGIY092blbr2brH
- TLSH T189579D5162E660F9E0BBE1398A7A8731E6727C130631934F13BCD65A1F63650AD39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies WinLogon for persistence
- Custom signature
UPX dump on OEP (original entry point)
Drops file in System32 directory