General
- Target 2026-07-01_3c17593be971b59a5647ae1e2120b198_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 11.1MB
- Sample260701-2bbchsft8q
- SHA256 33dc23e5e0c21576af7e07f0eeae42a391d7a25933a211fbe88e2781feaa3a4a
- MD5 3c17593be971b59a5647ae1e2120b198
- SHA1 7829705d785ba05b4af24aa88b60d40152caa63b
- SHA512 71e83c200bf3c2779c203e32426ab87babae99d62563c9e5929be1ff86db01f617a62cb1529081d011fe66683c55ad4d92521e8c2f313a5b7a4bc3b2d307a93b
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bbdt:HwYqoEYIbUwF1VERmj2bD
- TLSH T1DBC6DF0173E48F71E1BB56359A7586659A7B7C218F30C7CF13982E1D3E31690AA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-01_3c17593be971b59a5647ae1e2120b198_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_3c17593be971b59a5647ae1e2120b198_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260630-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_3c17593be971b59a5647ae1e2120b198_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 11.1MB
- SHA256 33dc23e5e0c21576af7e07f0eeae42a391d7a25933a211fbe88e2781feaa3a4a
- MD5 3c17593be971b59a5647ae1e2120b198
- SHA1 7829705d785ba05b4af24aa88b60d40152caa63b
- SHA512 71e83c200bf3c2779c203e32426ab87babae99d62563c9e5929be1ff86db01f617a62cb1529081d011fe66683c55ad4d92521e8c2f313a5b7a4bc3b2d307a93b
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bbdt:HwYqoEYIbUwF1VERmj2bD
- TLSH T1DBC6DF0173E48F71E1BB56359A7586659A7B7C218F30C7CF13982E1D3E31690AA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory