General
- Target 2026-07-01_168f93675e9aa39f383e3d928625fd74_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 11.6MB
- Sample260702-apl8dsat5z
- SHA256 9b7e96ed01794e30de695384dc4a6e44d4b911cc9fcd4ee77e1017a3a0af8b39
- MD5 168f93675e9aa39f383e3d928625fd74
- SHA1 8b8050d33a58d0261a4d7847899a5eeef8038e52
- SHA512 a9d48621b13d4b16983e9c30f4cb72adf6052cf8a7b1e047d7a044518b166ab3bdb8850ef07988c11d5d3952dbc778ab4c80217a361d1508fc4db25158f8bd0d
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bbd5:HwYqoEYIbUwF1VERmj2bz
- TLSH T12CC6DF0273E49A71F1BB56359E7586649A7B7C218F30C7CF23942E1D3E31690AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-01_168f93675e9aa39f383e3d928625fd74_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_168f93675e9aa39f383e3d928625fd74_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_168f93675e9aa39f383e3d928625fd74_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 11.6MB
- SHA256 9b7e96ed01794e30de695384dc4a6e44d4b911cc9fcd4ee77e1017a3a0af8b39
- MD5 168f93675e9aa39f383e3d928625fd74
- SHA1 8b8050d33a58d0261a4d7847899a5eeef8038e52
- SHA512 a9d48621b13d4b16983e9c30f4cb72adf6052cf8a7b1e047d7a044518b166ab3bdb8850ef07988c11d5d3952dbc778ab4c80217a361d1508fc4db25158f8bd0d
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bbd5:HwYqoEYIbUwF1VERmj2bz
- TLSH T12CC6DF0273E49A71F1BB56359E7586649A7B7C218F30C7CF23942E1D3E31690AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory