General
- Target 2026-07-20_916c0fac07364a10468513626d01cb48_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.0MB
- Sample260720-k9zz4acy5p
- SHA256 27cc28297f593ea8c717d8cc1a1654efd36c78cabaa0cb69a094dc0230d5d5f0
- MD5 916c0fac07364a10468513626d01cb48
- SHA1 48583eb3715762bd97689bd24bfb51c47d640d21
- SHA512 552fb52bdbb4adaa7c55a9a49dd22d2e90c98304209c30319f8aba31dde4050a93fb8360d0d6c6915469ba29a30f4171bebb52a1a56f505d66f5d7515d914e47
- SSDEEP 196608:HV0dEdfdW8dJeGZF6bUpMBF1p/kjRm4OWi2b/XcqjYjeZfdf:HVIbUwF1VERmj2bh8w
- TLSH T1C2D6DF0173E48535F1B75A358EBA96259A7B7C219F34C3CF23881A1D1E716D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-20_916c0fac07364a10468513626d01cb48_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_916c0fac07364a10468513626d01cb48_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_916c0fac07364a10468513626d01cb48_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.0MB
- SHA256 27cc28297f593ea8c717d8cc1a1654efd36c78cabaa0cb69a094dc0230d5d5f0
- MD5 916c0fac07364a10468513626d01cb48
- SHA1 48583eb3715762bd97689bd24bfb51c47d640d21
- SHA512 552fb52bdbb4adaa7c55a9a49dd22d2e90c98304209c30319f8aba31dde4050a93fb8360d0d6c6915469ba29a30f4171bebb52a1a56f505d66f5d7515d914e47
- SSDEEP 196608:HV0dEdfdW8dJeGZF6bUpMBF1p/kjRm4OWi2b/XcqjYjeZfdf:HVIbUwF1VERmj2bh8w
- TLSH T1C2D6DF0173E48535F1B75A358EBA96259A7B7C219F34C3CF23881A1D1E716D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory