General
- Target 2026-07-01_0bd96378f6fb37c5db38ff662c1627be_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.5MB
- Sample260702-ar7bcaat91
- SHA256 ebb91b906f7c16c13892664a85194543799608cf734f94c82f9bb0549f83bd4e
- MD5 0bd96378f6fb37c5db38ff662c1627be
- SHA1 12911234e160a862922c7ef1ae71fbc1caa0c71d
- SHA512 cb1eee722f3e78aa73afce87154692f2641c820483768ef4ba280359b1dd6c992c3a39edd3749c8be9a39937b2070a556142e8b15e8940eeebfff42f22a2066f
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bbdMJ:HwYqoEYIbUwF1VERmj2bI
- TLSH T133C6DF0177E48B71E1BB56358A7586649A7B7C218F34C7CF13982E1D3E316D0AA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-01_0bd96378f6fb37c5db38ff662c1627be_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_0bd96378f6fb37c5db38ff662c1627be_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_0bd96378f6fb37c5db38ff662c1627be_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.5MB
- SHA256 ebb91b906f7c16c13892664a85194543799608cf734f94c82f9bb0549f83bd4e
- MD5 0bd96378f6fb37c5db38ff662c1627be
- SHA1 12911234e160a862922c7ef1ae71fbc1caa0c71d
- SHA512 cb1eee722f3e78aa73afce87154692f2641c820483768ef4ba280359b1dd6c992c3a39edd3749c8be9a39937b2070a556142e8b15e8940eeebfff42f22a2066f
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bbdMJ:HwYqoEYIbUwF1VERmj2bI
- TLSH T133C6DF0177E48B71E1BB56358A7586649A7B7C218F34C7CF13982E1D3E316D0AA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory