General
- Target 2026-07-15_8a9853ed706dab84a79a1fd6092e4be7_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.0MB
- Sample260715-e9ljtaew7z
- SHA256 1664f53e2e6aa47b2ccc01f3d1a44f647ade853e105b9334df26a585fa7332de
- MD5 8a9853ed706dab84a79a1fd6092e4be7
- SHA1 f19fbb233378583c73183b9d461c3363a1c0d6e2
- SHA512 51b6a9628b4a20702cde0bcaaa450a2b02e5cbabd38de2a3889623eca6c21501a9f4468f14d729e1c039458cb641f7bef914f87115781ab2aee43ce2208aeac1
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bDG:HwYqoEYIbUwF1VERmj2bK
- TLSH T17CC6CF0177E49A30F1BB1A319E7596649A7B7C219F34C7CF23942E1D3E71680AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-15_8a9853ed706dab84a79a1fd6092e4be7_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_8a9853ed706dab84a79a1fd6092e4be7_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_8a9853ed706dab84a79a1fd6092e4be7_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.0MB
- SHA256 1664f53e2e6aa47b2ccc01f3d1a44f647ade853e105b9334df26a585fa7332de
- MD5 8a9853ed706dab84a79a1fd6092e4be7
- SHA1 f19fbb233378583c73183b9d461c3363a1c0d6e2
- SHA512 51b6a9628b4a20702cde0bcaaa450a2b02e5cbabd38de2a3889623eca6c21501a9f4468f14d729e1c039458cb641f7bef914f87115781ab2aee43ce2208aeac1
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bDG:HwYqoEYIbUwF1VERmj2bK
- TLSH T17CC6CF0177E49A30F1BB1A319E7596649A7B7C219F34C7CF23942E1D3E71680AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory