General
- Target 2026-04-16_968bb3534158da14a1a94189ebaba749_amadey_coinminer_elex_icedid_luca-stealer_njrat_remcos_vidar
- Size 1.3MB
- Sample260416-tchh8aev6l
- SHA256 afef81d905fd11f878a9a2271398dd3caf5860dee53e2eab41c7fce7b5e8ab33
- MD5 968bb3534158da14a1a94189ebaba749
- SHA1 4c2ff0b47227b008f4ff867b8932609d9cc6a3a6
- SHA512 9a554bdef5508c7ccafe7262799021855a9ca255b2e0d1983a977b87a70a0a659c5db204859d521339e2f52aa8a25b07c912088b673d6ce0c3b89384826f2404
- SSDEEP 24576:WbH+V3WnIZuMCxezot7kGFYKWoSip2ZzrTEJVJTt4D7/SAOZi+5v48cKfP:WbH+VLZ5zot7k1KRXpyPSVBXdc6
- TLSH T1C955C03272A040B2E2F35136EA249630FD7DBD241720D59E93D8BA1E3F365919B77722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-16_968bb3534158da14a1a94189ebaba749_amadey_coinminer_elex_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_968bb3534158da14a1a94189ebaba749_amadey_coinminer_elex_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_968bb3534158da14a1a94189ebaba749_amadey_coinminer_elex_icedid_luca-stealer_njrat_remcos_vidar
- Size 1.3MB
- SHA256 afef81d905fd11f878a9a2271398dd3caf5860dee53e2eab41c7fce7b5e8ab33
- MD5 968bb3534158da14a1a94189ebaba749
- SHA1 4c2ff0b47227b008f4ff867b8932609d9cc6a3a6
- SHA512 9a554bdef5508c7ccafe7262799021855a9ca255b2e0d1983a977b87a70a0a659c5db204859d521339e2f52aa8a25b07c912088b673d6ce0c3b89384826f2404
- SSDEEP 24576:WbH+V3WnIZuMCxezot7kGFYKWoSip2ZzrTEJVJTt4D7/SAOZi+5v48cKfP:WbH+VLZ5zot7k1KRXpyPSVBXdc6
- TLSH T1C955C03272A040B2E2F35136EA249630FD7DBD241720D59E93D8BA1E3F365919B77722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Adds Run key to start application