General
- Target 2026-07-31_c13f2d22e538aa9e16b07b947fee5ce1_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_stop_tofsee_vidar
- Size 19.0MB
- Sample260801-bnhdgsbd62
- SHA256 5fa9d1583d3ab448b1224d6eceff12f6c66a32b76d40d786386044d619ff4d5a
- MD5 c13f2d22e538aa9e16b07b947fee5ce1
- SHA1 82a1e53f9f66d7f78027ba67e36175dcb82e0954
- SHA512 4cbe7d239f1beec7f77a8743b446b37dbae84aa51631c8f723e1a285d021ff1680ac506d6e6c19e6c75d2276599e2ad612336b7d1b5bd4cf3063ae07d160d48e
- SSDEEP 196608:anSunSunSunS+21Bu0FnSunSunSunS+21Bu0L1tIDewjqkjiqMK:a111zXu111zXU8KwekyK
- TLSH T1D017BE19FE9580F1E96BA47458EBD37BDA717A2144334B6BEA89C70F6E336214C18331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_c13f2d22e538aa9e16b07b947fee5ce1_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_c13f2d22e538aa9e16b07b947fee5ce1_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_c13f2d22e538aa9e16b07b947fee5ce1_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_njrat_remcos_smoke-loader_stealc_stop_tofsee_vidar
- Size 19.0MB
- SHA256 5fa9d1583d3ab448b1224d6eceff12f6c66a32b76d40d786386044d619ff4d5a
- MD5 c13f2d22e538aa9e16b07b947fee5ce1
- SHA1 82a1e53f9f66d7f78027ba67e36175dcb82e0954
- SHA512 4cbe7d239f1beec7f77a8743b446b37dbae84aa51631c8f723e1a285d021ff1680ac506d6e6c19e6c75d2276599e2ad612336b7d1b5bd4cf3063ae07d160d48e
- SSDEEP 196608:anSunSunSunS+21Bu0FnSunSunSunS+21Bu0L1tIDewjqkjiqMK:a111zXu111zXU8KwekyK
- TLSH T1D017BE19FE9580F1E96BA47458EBD37BDA717A2144334B6BEA89C70F6E336214C18331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1