General
- Target 2026-06-02_3da6f555928ba75d59b60c20bcc64167_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 10.4MB
- Sample260602-n2vl7adv2m
- SHA256 b9e9812126ce5d4ed26b889b0daa1bea54694e4a9c931097cbc3f4f0baf0cc87
- MD5 3da6f555928ba75d59b60c20bcc64167
- SHA1 c11a33f542170175e92ea631782774f89745d97b
- SHA512 fd02fc67cbe18a54f7bec6c6b9f4d12a44c56990006685642103cf319913eddb83bef9007a60b8921f954143054073c0d897ac41165b055223fc916f6409a12b
- SSDEEP 196608:HVmj5vjIjfeGZF6bUpMBF1p/kjRm4OWi2by2ydi:Hwtc7IbUwF1VERmj2bh
- TLSH T1F9B6D00177D08A35F1BB1A318A7A96645A7B7C219F34C7CF63842E1D6E706D0EA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-02_3da6f555928ba75d59b60c20bcc64167_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_3da6f555928ba75d59b60c20bcc64167_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_3da6f555928ba75d59b60c20bcc64167_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 10.4MB
- SHA256 b9e9812126ce5d4ed26b889b0daa1bea54694e4a9c931097cbc3f4f0baf0cc87
- MD5 3da6f555928ba75d59b60c20bcc64167
- SHA1 c11a33f542170175e92ea631782774f89745d97b
- SHA512 fd02fc67cbe18a54f7bec6c6b9f4d12a44c56990006685642103cf319913eddb83bef9007a60b8921f954143054073c0d897ac41165b055223fc916f6409a12b
- SSDEEP 196608:HVmj5vjIjfeGZF6bUpMBF1p/kjRm4OWi2by2ydi:Hwtc7IbUwF1VERmj2bh
- TLSH T1F9B6D00177D08A35F1BB1A318A7A96645A7B7C219F34C7CF63842E1D6E706D0EA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory