General
- Target 2026-11-06_c5c2ec3c29bf9f4679d5e86e794631b7_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- Sample261107-3ynrssgt2s
- SHA256 02eb6d6bcdbaf436fe73837c1dfc9e356431ec767e349dc97bdef6c44cc255df
- MD5 c5c2ec3c29bf9f4679d5e86e794631b7
- SHA1 7aa752851803cda5e32b47e4222f91e91069a0c7
- SHA512 d3aa03288199b6d08e3e4c0a010ac1e60975186c2c2e6cc73c332a8507ee1135a3da2434f808e69d2ef08fbac347e2a7433487aabe5ff28ef805b1a95251c6b2
- SSDEEP 3072:HNXEGZJWhfNFC4S60+XoLczrVmXEoYAC2o+pzWGLiw6Zau4NDBzdrmaDQ0cH01nW:tXzKdNY49u8rV+zCwzz9W01netl
- TLSH T135548D636E496901FB324F3815A367ED7AA6FE41249F354B10C5B64E32B7293120B93F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-06_c5c2ec3c29bf9f4679d5e86e794631b7_cobalt-strike_coinminer_conti_elex_hijackloader.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-06_c5c2ec3c29bf9f4679d5e86e794631b7_cobalt-strike_coinminer_conti_elex_hijackloader
- Size 277KB
- SHA256 02eb6d6bcdbaf436fe73837c1dfc9e356431ec767e349dc97bdef6c44cc255df
- MD5 c5c2ec3c29bf9f4679d5e86e794631b7
- SHA1 7aa752851803cda5e32b47e4222f91e91069a0c7
- SHA512 d3aa03288199b6d08e3e4c0a010ac1e60975186c2c2e6cc73c332a8507ee1135a3da2434f808e69d2ef08fbac347e2a7433487aabe5ff28ef805b1a95251c6b2
- SSDEEP 3072:HNXEGZJWhfNFC4S60+XoLczrVmXEoYAC2o+pzWGLiw6Zau4NDBzdrmaDQ0cH01nW:tXzKdNY49u8rV+zCwzz9W01netl
- TLSH T135548D636E496901FB324F3815A367ED7AA6FE41249F354B10C5B64E32B7293120B93F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.