General
- Target 2026-07-03_3fc1d3580d2fb85ba5e4fa97790ab2b9_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.2MB
- Sample260703-dplteaay4v
- SHA256 7cec9a2e167e3925269e4d9d7ba89a3a41fad7685ce6f2452c49f77d8994b27a
- MD5 3fc1d3580d2fb85ba5e4fa97790ab2b9
- SHA1 3698e02a97fe14f5e953177a4bec9393412715de
- SHA512 ff1a30bb571c9ef838e2082859619e36ea71e7909cbdd6426fb4fdb15f2b8976cbf0d050706a83a11f3aa8ad78450e109777087a6e87ce07dfeb44b9a542fc2b
- SSDEEP 196608:HV0dEdfdW8dJeGZF6bUpMBF1p/kjRm4OWi2b/XcqjYjes:HVIbUwF1VERmj2bh8f
- TLSH T1B5D6DF0173E48535F1B75B358EBA96259A7B7C219F34C38F23881A1D1E716D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-03_3fc1d3580d2fb85ba5e4fa97790ab2b9_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_3fc1d3580d2fb85ba5e4fa97790ab2b9_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_3fc1d3580d2fb85ba5e4fa97790ab2b9_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.2MB
- SHA256 7cec9a2e167e3925269e4d9d7ba89a3a41fad7685ce6f2452c49f77d8994b27a
- MD5 3fc1d3580d2fb85ba5e4fa97790ab2b9
- SHA1 3698e02a97fe14f5e953177a4bec9393412715de
- SHA512 ff1a30bb571c9ef838e2082859619e36ea71e7909cbdd6426fb4fdb15f2b8976cbf0d050706a83a11f3aa8ad78450e109777087a6e87ce07dfeb44b9a542fc2b
- SSDEEP 196608:HV0dEdfdW8dJeGZF6bUpMBF1p/kjRm4OWi2b/XcqjYjes:HVIbUwF1VERmj2bh8f
- TLSH T1B5D6DF0173E48535F1B75B358EBA96259A7B7C219F34C38F23881A1D1E716D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory