General
- Target 2026-08-06_7bec73cc4590da72b9537c69fd025626_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 11.6MB
- Sample260806-2ytglsbr4t
- SHA256 b61506ccf4add7c5152c617c8a2e4a08ac976b7b47e1092ee7398c5d0d95ca00
- MD5 7bec73cc4590da72b9537c69fd025626
- SHA1 496b4d04e375fc7a952b94ead86cf19c24c35de0
- SHA512 20c91fed0da22bdb9e8bec01275ddeda797ad6addef271911d5baad031f49aa4d783900913c54062ca16206b638c22fe982dc50464dea7ead03c7fc5eb324395
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bq:HwYqoEYIbUwF1VERmj2bq
- TLSH T16FC6CF0277E49A70F1BB16319E7586649A7B7C219F34C7CF23942E1D3E71680AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-06_7bec73cc4590da72b9537c69fd025626_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_7bec73cc4590da72b9537c69fd025626_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_7bec73cc4590da72b9537c69fd025626_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 11.6MB
- SHA256 b61506ccf4add7c5152c617c8a2e4a08ac976b7b47e1092ee7398c5d0d95ca00
- MD5 7bec73cc4590da72b9537c69fd025626
- SHA1 496b4d04e375fc7a952b94ead86cf19c24c35de0
- SHA512 20c91fed0da22bdb9e8bec01275ddeda797ad6addef271911d5baad031f49aa4d783900913c54062ca16206b638c22fe982dc50464dea7ead03c7fc5eb324395
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bq:HwYqoEYIbUwF1VERmj2bq
- TLSH T16FC6CF0277E49A70F1BB16319E7586649A7B7C219F34C7CF23942E1D3E71680AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory