General
- Target 2026-05-29_4060ced3ebdca82133baa99ec18caff7_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader_stop
- Size 9.6MB
- Sample260529-bb663sfv2v
- SHA256 7c8b2ef8222ddc8d24f24029f72db0b9655199e6a22f9a6fb988b25bd1cea81b
- MD5 4060ced3ebdca82133baa99ec18caff7
- SHA1 29332a6adec9b1bb6967227127b9042dcde86844
- SHA512 834473c518afd0651b251229f6ffc9fd3edb80ba1462ad6f11b27ad09baf6a5b371eb52e6075ea19742ee703f77cbd609e40d7026f42808074ebb0d18d4ca88c
- SSDEEP 196608:HVmj5vjIjfeGZF6bUpMBF1p/kjRm4OWi2b1:Hwtc7IbUwF1VERmj2b1
- TLSH T1A0A6D00177E49A31F1BB1A319E7992645A7BBC619E34C7CF23842E1D79706C0EA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-05-29_4060ced3ebdca82133baa99ec18caff7_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_luc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-29_4060ced3ebdca82133baa99ec18caff7_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_luc.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-29_4060ced3ebdca82133baa99ec18caff7_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader_stop
- Size 9.6MB
- SHA256 7c8b2ef8222ddc8d24f24029f72db0b9655199e6a22f9a6fb988b25bd1cea81b
- MD5 4060ced3ebdca82133baa99ec18caff7
- SHA1 29332a6adec9b1bb6967227127b9042dcde86844
- SHA512 834473c518afd0651b251229f6ffc9fd3edb80ba1462ad6f11b27ad09baf6a5b371eb52e6075ea19742ee703f77cbd609e40d7026f42808074ebb0d18d4ca88c
- SSDEEP 196608:HVmj5vjIjfeGZF6bUpMBF1p/kjRm4OWi2b1:Hwtc7IbUwF1VERmj2b1
- TLSH T1A0A6D00177E49A31F1BB1A319E7992645A7BBC619E34C7CF23842E1D79706C0EA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory