General
- Target 2026-08-03_ecbe5f695d885404d9695e879715a4d2_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 10.7MB
- Sample260803-t2yazacc24
- SHA256 b53acea501b50761d1d7f712da70a51dbc697845b181c262aa21df1e4052ec79
- MD5 ecbe5f695d885404d9695e879715a4d2
- SHA1 8214d41d8a1484fb46e72eb7a6453bbc1e15fb49
- SHA512 3adb99847050d9b7fdf5abcc1b446541cf5744ee5c516239922d2cd02dfb5081c97cbe65a27911de7b3aa7f5a6df4c0a6d9dee9c0631830e9cf4129d7abffd25
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bx:HwYqoEYIbUwF1VERmj2bx
- TLSH T15AB6DF0277E49F71E1BB16359A7586649A7B7C218F30C7CF23942E1D3E31690AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_ecbe5f695d885404d9695e879715a4d2_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_ecbe5f695d885404d9695e879715a4d2_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_ecbe5f695d885404d9695e879715a4d2_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 10.7MB
- SHA256 b53acea501b50761d1d7f712da70a51dbc697845b181c262aa21df1e4052ec79
- MD5 ecbe5f695d885404d9695e879715a4d2
- SHA1 8214d41d8a1484fb46e72eb7a6453bbc1e15fb49
- SHA512 3adb99847050d9b7fdf5abcc1b446541cf5744ee5c516239922d2cd02dfb5081c97cbe65a27911de7b3aa7f5a6df4c0a6d9dee9c0631830e9cf4129d7abffd25
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bx:HwYqoEYIbUwF1VERmj2bx
- TLSH T15AB6DF0277E49F71E1BB16359A7586649A7B7C218F30C7CF23942E1D3E31690AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory