General
- Target 2026-07-08_03e90d42249556e11f3c9b08a578bb80_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 11.2MB
- Sample260708-2ne68sbs2z
- SHA256 3dfcd2a6656a59656d47cc926192d1d29fb6db985ccbc3761c8127e8b3f39643
- MD5 03e90d42249556e11f3c9b08a578bb80
- SHA1 9b0ec8ca4cf4819cabf8e234c719c944c59e7496
- SHA512 5ef4513186a8b1ecd9215c71f8bc11b67d670dcc2b8cccddfdeb1d2639a0beaa68d1fcd762cacfc300ebfbb5fc7d04b6ab393f76ebb13580c379e85e6223dfed
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bF:HwYqoEYIbUwF1VERmj2bF
- TLSH T177C6DF0277E49B71F1BB16319A7586649A7B7C219F34C7CF23942E1D3E31680AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-08_03e90d42249556e11f3c9b08a578bb80_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_03e90d42249556e11f3c9b08a578bb80_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_03e90d42249556e11f3c9b08a578bb80_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 11.2MB
- SHA256 3dfcd2a6656a59656d47cc926192d1d29fb6db985ccbc3761c8127e8b3f39643
- MD5 03e90d42249556e11f3c9b08a578bb80
- SHA1 9b0ec8ca4cf4819cabf8e234c719c944c59e7496
- SHA512 5ef4513186a8b1ecd9215c71f8bc11b67d670dcc2b8cccddfdeb1d2639a0beaa68d1fcd762cacfc300ebfbb5fc7d04b6ab393f76ebb13580c379e85e6223dfed
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bF:HwYqoEYIbUwF1VERmj2bF
- TLSH T177C6DF0277E49B71F1BB16319A7586649A7B7C219F34C7CF23942E1D3E31680AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory