General
- Target 2026-04-17_aebb13622174e607d62da85cee7da6a3_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 3.4MB
- Sample260417-e5geasav81
- SHA256 e1b19199b11bcde6b5d9132cfddc65038d60f27b382e4ea6be4fa202b6dba1ee
- MD5 aebb13622174e607d62da85cee7da6a3
- SHA1 538d1cb093780e4ea74a85f4e1c326624bef9d94
- SHA512 5495f4d142dc5a60d31f8104ab53843787c1e97bb64d6338f8789371119ab190add895422f4ce8c5ffe6f1fd4ef9cc31bae66c95fa268ef70f6e97afd7c91d04
- SSDEEP 49152:Hwglj5loX+4gAjh2VBXdcBDd79WCYDd79WCLDd79WCCVBXdc7+4gAjh3:Hwoj5l8+4j8d0p7Kp7Fp7UdM+4jx
- TLSH T156F56B0177D08A35F1BB16358A7A9724997B7C215F34C7CF63882E6D2E316D0AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-04-17_aebb13622174e607d62da85cee7da6a3_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-s.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_aebb13622174e607d62da85cee7da6a3_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-s.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_aebb13622174e607d62da85cee7da6a3_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 3.4MB
- SHA256 e1b19199b11bcde6b5d9132cfddc65038d60f27b382e4ea6be4fa202b6dba1ee
- MD5 aebb13622174e607d62da85cee7da6a3
- SHA1 538d1cb093780e4ea74a85f4e1c326624bef9d94
- SHA512 5495f4d142dc5a60d31f8104ab53843787c1e97bb64d6338f8789371119ab190add895422f4ce8c5ffe6f1fd4ef9cc31bae66c95fa268ef70f6e97afd7c91d04
- SSDEEP 49152:Hwglj5loX+4gAjh2VBXdcBDd79WCYDd79WCLDd79WCCVBXdc7+4gAjh3:Hwoj5l8+4j8d0p7Kp7Fp7UdM+4jx
- TLSH T156F56B0177D08A35F1BB16358A7A9724997B7C215F34C7CF63882E6D2E316D0AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory