General
- Target 2026-05-01_a5047aa75af6ea8164acf642ec869f15_amadey_coinminer_elex_icedid_luca-stealer_njrat_remcos_vidar
- Size 1.3MB
- Sample260501-vpdapsd13l
- SHA256 9cf5d0d31d2296d35a9295865ebc07ec0e1cc1b42db970ab160326e60dd5c70e
- MD5 a5047aa75af6ea8164acf642ec869f15
- SHA1 101269d96267484d293d800d5465df762f26629d
- SHA512 4fed6b4a43668445837b555d3858d4e0fdc3249d2b9bd0f0d9ab321607a9be20515d6553e5177f169bd2c82b9aac187d4aed34f45f9ed8c910c890fce7a6a8e4
- SSDEEP 24576:Wb++V3WnIZuMCxezot7kGFYKWoSip2ZzrTEJVJTt4D7/SAOZi+5v48cKf2:Wb++VLZ5zot7k1KRXpyPSVBXdcL
- TLSH T1C955C03272A040B2E2F35136EA249630FE7DBD241B20D55E93D8BA1E3F365915B77722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-01_a5047aa75af6ea8164acf642ec869f15_amadey_coinminer_elex_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-01_a5047aa75af6ea8164acf642ec869f15_amadey_coinminer_elex_icedid_luca-stealer_njrat_remcos_vidar.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-01_a5047aa75af6ea8164acf642ec869f15_amadey_coinminer_elex_icedid_luca-stealer_njrat_remcos_vidar
- Size 1.3MB
- SHA256 9cf5d0d31d2296d35a9295865ebc07ec0e1cc1b42db970ab160326e60dd5c70e
- MD5 a5047aa75af6ea8164acf642ec869f15
- SHA1 101269d96267484d293d800d5465df762f26629d
- SHA512 4fed6b4a43668445837b555d3858d4e0fdc3249d2b9bd0f0d9ab321607a9be20515d6553e5177f169bd2c82b9aac187d4aed34f45f9ed8c910c890fce7a6a8e4
- SSDEEP 24576:Wb++V3WnIZuMCxezot7kGFYKWoSip2ZzrTEJVJTt4D7/SAOZi+5v48cKf2:Wb++VLZ5zot7k1KRXpyPSVBXdcL
- TLSH T1C955C03272A040B2E2F35136EA249630FE7DBD241B20D55E93D8BA1E3F365915B77722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Adds Run key to start application