General
- Target 2026-07-09_ecb54a6a27725c5b86e1b08202978150_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.6MB
- Sample260709-b6f85sct7y
- SHA256 fd0f341c8036181bec691919c7fab2e681b73c679b22d2bcd8436d9e0889f2dd
- MD5 ecb54a6a27725c5b86e1b08202978150
- SHA1 f251236dbcdd98c3909085dd2cf2222f8abd7eaa
- SHA512 4a52d4ff6a0e4f47d9a6404ecf23b7b510933e539c41f249a7630c2336688c25319c97a117a20799c66b773784c0089d29cb7d51ed44ce9457967767f8ed031b
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bkf:HwYqoEYIbUwF1VERmj2bc
- TLSH T15BC6DF0177E49A31F1BB1A319A7586649A7B7C219F34C7CF23942E1D3E316D0AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-09_ecb54a6a27725c5b86e1b08202978150_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_ecb54a6a27725c5b86e1b08202978150_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_ecb54a6a27725c5b86e1b08202978150_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.6MB
- SHA256 fd0f341c8036181bec691919c7fab2e681b73c679b22d2bcd8436d9e0889f2dd
- MD5 ecb54a6a27725c5b86e1b08202978150
- SHA1 f251236dbcdd98c3909085dd2cf2222f8abd7eaa
- SHA512 4a52d4ff6a0e4f47d9a6404ecf23b7b510933e539c41f249a7630c2336688c25319c97a117a20799c66b773784c0089d29cb7d51ed44ce9457967767f8ed031b
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bkf:HwYqoEYIbUwF1VERmj2bc
- TLSH T15BC6DF0177E49A31F1BB1A319A7586649A7B7C219F34C7CF23942E1D3E316D0AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory