General
- Target 2026-06-30_326d0e5ed855737c5c55b1467eced60a_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.7MB
- Sample260701-gfx2vsg17w
- SHA256 24243b340b0ab9560fffe4e79412603ca2b984b832243b5dc4e3b8f9e292638a
- MD5 326d0e5ed855737c5c55b1467eced60a
- SHA1 5790cea7d85f5ce382cf135e4694c39c2fa6bb8e
- SHA512 33952f1326eca4d0089d4fbf9ba9200320a8926a7ac81bdb0ed5d02d9e564d9a46496ca9fe87243534c960f6ee2b7bfc855cc6501f8c03417143347a44a55307
- SSDEEP 196608:HV0dEdfdW8dJeGZF6bUpMBF1p/kjRm4OWi2b/XcqjYjP:HVIbUwF1VERmj2bh8j
- TLSH T1A7C6D00173E48535F1B75A358E7A96259A7B7C219F34C3CF23881A1D2E716D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-30_326d0e5ed855737c5c55b1467eced60a_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_326d0e5ed855737c5c55b1467eced60a_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_326d0e5ed855737c5c55b1467eced60a_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.7MB
- SHA256 24243b340b0ab9560fffe4e79412603ca2b984b832243b5dc4e3b8f9e292638a
- MD5 326d0e5ed855737c5c55b1467eced60a
- SHA1 5790cea7d85f5ce382cf135e4694c39c2fa6bb8e
- SHA512 33952f1326eca4d0089d4fbf9ba9200320a8926a7ac81bdb0ed5d02d9e564d9a46496ca9fe87243534c960f6ee2b7bfc855cc6501f8c03417143347a44a55307
- SSDEEP 196608:HV0dEdfdW8dJeGZF6bUpMBF1p/kjRm4OWi2b/XcqjYjP:HVIbUwF1VERmj2bh8j
- TLSH T1A7C6D00173E48535F1B75A358E7A96259A7B7C219F34C3CF23881A1D2E716D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory