General
- Target 2026-08-03_611e55fb58e86666d1a8aa41ceceb4e4_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.6MB
- Sample260804-ntfs3ayglb
- SHA256 224ea1a68e1751afeeaf6433ca2d55f08c871a27443ac90f02d57f44647de346
- MD5 611e55fb58e86666d1a8aa41ceceb4e4
- SHA1 da52c10699b7e664d035e06018b06d7a35e85b37
- SHA512 b1fab31239229dc591e4b6e3a300d01e978852193a06acd013311140a3d8826bfc0c37f9f781c214fcaa996f67e41d70508d78cb54ec5da68b8f958a5a069f93
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bk+:HwYqoEYIbUwF1VERmj2bp
- TLSH T1D8C6DF0177E49A31F1BB1A319A7586649A7B7C219F34C7CF23942E1D3E316D0AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_611e55fb58e86666d1a8aa41ceceb4e4_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_611e55fb58e86666d1a8aa41ceceb4e4_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_611e55fb58e86666d1a8aa41ceceb4e4_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.6MB
- SHA256 224ea1a68e1751afeeaf6433ca2d55f08c871a27443ac90f02d57f44647de346
- MD5 611e55fb58e86666d1a8aa41ceceb4e4
- SHA1 da52c10699b7e664d035e06018b06d7a35e85b37
- SHA512 b1fab31239229dc591e4b6e3a300d01e978852193a06acd013311140a3d8826bfc0c37f9f781c214fcaa996f67e41d70508d78cb54ec5da68b8f958a5a069f93
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bk+:HwYqoEYIbUwF1VERmj2bp
- TLSH T1D8C6DF0177E49A31F1BB1A319A7586649A7B7C219F34C7CF23942E1D3E316D0AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory