General
- Target 2026-06-28_49cda85a6aa0772dfb68d78cdba042ac_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.2MB
- Sample260628-2s9xeagw7k
- SHA256 f1736137c0aa23f6e88e437a3ddacc858e471d220cd57aaf3228f508c9bf725b
- MD5 49cda85a6aa0772dfb68d78cdba042ac
- SHA1 b4783123dab892a0681b648e47a0d84aaae44177
- SHA512 fe21610eb483ce4a96b412373ce94e36a0a08ad4c7d960f4002660c9ea5d093acfdd15235ab28abca71a5c84ff751ebe76f4d7c4050eb119a4c5891965c5a419
- SSDEEP 196608:HV0dEdfdW8dJeGZF6bUpMBF1p/kjRm4OWi2b/XcqjYjzdW:HVIbUwF1VERmj2bh84
- TLSH T156D6D00173E48575F1B756358EBA86219A7B7C219F34C3CF13981A1D2E726D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-28_49cda85a6aa0772dfb68d78cdba042ac_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_49cda85a6aa0772dfb68d78cdba042ac_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260618-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_49cda85a6aa0772dfb68d78cdba042ac_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.2MB
- SHA256 f1736137c0aa23f6e88e437a3ddacc858e471d220cd57aaf3228f508c9bf725b
- MD5 49cda85a6aa0772dfb68d78cdba042ac
- SHA1 b4783123dab892a0681b648e47a0d84aaae44177
- SHA512 fe21610eb483ce4a96b412373ce94e36a0a08ad4c7d960f4002660c9ea5d093acfdd15235ab28abca71a5c84ff751ebe76f4d7c4050eb119a4c5891965c5a419
- SSDEEP 196608:HV0dEdfdW8dJeGZF6bUpMBF1p/kjRm4OWi2b/XcqjYjzdW:HVIbUwF1VERmj2bh84
- TLSH T156D6D00173E48575F1B756358EBA86219A7B7C219F34C3CF13981A1D2E726D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory