General
- Target 2026-07-23_215a1ba7c213999520d9528a0d590120_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 7.4MB
- Sample260723-v6j5kstepe
- SHA256 f3841fab626c5274056b3fb4e9295f979289a479002f89016ac7e114d22d9d3c
- MD5 215a1ba7c213999520d9528a0d590120
- SHA1 9c469ad6a19b4c1e0116bba537e24d298a8a78e7
- SHA512 60be0e0d6936fdb582a615f919b670e7c0defbb580d242b1c49b0fc93f2a3dfefd3c8ca0ecacfcf79d191d5435fb3aef37304133ddf345b94ae9610c4301f36e
- SSDEEP 98304:Hwoj5l8+4j7p7J+4jxde+4jgd67pM7pzdkdnA91pH2WpjHrgBQ:HVmj5Vjxd4jgdBdkdnmHpn6Q
- TLSH T1B0767D0173E445B5E1BB9235CA799632EAB77C124E3093CF1394DE5A2F336909939B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-23_215a1ba7c213999520d9528a0d590120_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-s.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_215a1ba7c213999520d9528a0d590120_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-s.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_215a1ba7c213999520d9528a0d590120_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 7.4MB
- SHA256 f3841fab626c5274056b3fb4e9295f979289a479002f89016ac7e114d22d9d3c
- MD5 215a1ba7c213999520d9528a0d590120
- SHA1 9c469ad6a19b4c1e0116bba537e24d298a8a78e7
- SHA512 60be0e0d6936fdb582a615f919b670e7c0defbb580d242b1c49b0fc93f2a3dfefd3c8ca0ecacfcf79d191d5435fb3aef37304133ddf345b94ae9610c4301f36e
- SSDEEP 98304:Hwoj5l8+4j7p7J+4jxde+4jgd67pM7pzdkdnA91pH2WpjHrgBQ:HVmj5Vjxd4jgdBdkdnmHpn6Q
- TLSH T1B0767D0173E445B5E1BB9235CA799632EAB77C124E3093CF1394DE5A2F336909939B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory