General
- Target 2026-08-03_b9f491a6746ca09b29c09aaf9281e151_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.6MB
- Sample260804-l2p1laxcqh
- SHA256 7ec8dbe2f197cfe8674420fb8aece98ecb0953f5b36072f5752b4e9d4896a775
- MD5 b9f491a6746ca09b29c09aaf9281e151
- SHA1 2edd5a12d510a4c1db8fc0908535e69e9ce3fb57
- SHA512 55c4c9016309ccdb6aab4f0291268b16f65f2cb065b66632b06cb818112dd3df969590a0a6dbf0e4ad3bb77be3f8ac65e38951c46fd790f6ec5b736660ec5f48
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bkW:HwYqoEYIbUwF1VERmj2bJ
- TLSH T107C6DF0177E49A31F1BB1A319A7586649A7B7C219F34C7CF23942E1D3E316D0AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_b9f491a6746ca09b29c09aaf9281e151_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_b9f491a6746ca09b29c09aaf9281e151_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_b9f491a6746ca09b29c09aaf9281e151_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.6MB
- SHA256 7ec8dbe2f197cfe8674420fb8aece98ecb0953f5b36072f5752b4e9d4896a775
- MD5 b9f491a6746ca09b29c09aaf9281e151
- SHA1 2edd5a12d510a4c1db8fc0908535e69e9ce3fb57
- SHA512 55c4c9016309ccdb6aab4f0291268b16f65f2cb065b66632b06cb818112dd3df969590a0a6dbf0e4ad3bb77be3f8ac65e38951c46fd790f6ec5b736660ec5f48
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bkW:HwYqoEYIbUwF1VERmj2bJ
- TLSH T107C6DF0177E49A31F1BB1A319A7586649A7B7C219F34C7CF23942E1D3E316D0AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory