General
- Target 2026-08-04_1eb9a6bd6e56f8644c41957fdf5b6f93_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 12.0MB
- Sample260805-blejtavgpd
- SHA256 bf725173e555071b4fa3ebaf2ba9c2b9533c07a83c6a900d0d594e9ec0d91b47
- MD5 1eb9a6bd6e56f8644c41957fdf5b6f93
- SHA1 8a2a68140983e7d8c355107f71da00b8632d150e
- SHA512 9173e62511d3322fc9f0e59cdd01cd046cec69c35cc53f68f9532842e455ec022b363951236ea3397eba7823d816ab6de6f83a5d8e7fb5c1c371d63c61ad5da3
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bGdi:HwYqoEYIbUwF1VERmj2bT
- TLSH T150D6CF0273E49A70F1BB56359E7586659A7B7C219F30C7CF23942E1D3E31680AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_1eb9a6bd6e56f8644c41957fdf5b6f93_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_1eb9a6bd6e56f8644c41957fdf5b6f93_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_1eb9a6bd6e56f8644c41957fdf5b6f93_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 12.0MB
- SHA256 bf725173e555071b4fa3ebaf2ba9c2b9533c07a83c6a900d0d594e9ec0d91b47
- MD5 1eb9a6bd6e56f8644c41957fdf5b6f93
- SHA1 8a2a68140983e7d8c355107f71da00b8632d150e
- SHA512 9173e62511d3322fc9f0e59cdd01cd046cec69c35cc53f68f9532842e455ec022b363951236ea3397eba7823d816ab6de6f83a5d8e7fb5c1c371d63c61ad5da3
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bGdi:HwYqoEYIbUwF1VERmj2bT
- TLSH T150D6CF0273E49A70F1BB56359E7586659A7B7C219F30C7CF23942E1D3E31680AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory