General
- Target 2026-08-06_b415d5766d720d4187500672cbcf14e6_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.6MB
- Sample260807-anbehaxvcs
- SHA256 dc65eb0c6fe7cbe30fcf23abddfbae13ec98658140ba050ed0a9ea9902b6640f
- MD5 b415d5766d720d4187500672cbcf14e6
- SHA1 2101a9091a000cac938114187b4196bb89e022c0
- SHA512 fa184a3942bf964e21eb63cdb0d2a67104dd3e46536bcd10796d02d59dba0dc4a8032bcb6fc8fe88e34806a51e88bba8a2122f25c554e7f15a8f96541f9214d5
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bk6:HwYqoEYIbUwF1VERmj2bZ
- TLSH T10BC6DF0177E49A31F1BB1A319A7586649A7B7C219F34C7CF23942E1D3E316D0AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-06_b415d5766d720d4187500672cbcf14e6_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_b415d5766d720d4187500672cbcf14e6_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_b415d5766d720d4187500672cbcf14e6_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 11.6MB
- SHA256 dc65eb0c6fe7cbe30fcf23abddfbae13ec98658140ba050ed0a9ea9902b6640f
- MD5 b415d5766d720d4187500672cbcf14e6
- SHA1 2101a9091a000cac938114187b4196bb89e022c0
- SHA512 fa184a3942bf964e21eb63cdb0d2a67104dd3e46536bcd10796d02d59dba0dc4a8032bcb6fc8fe88e34806a51e88bba8a2122f25c554e7f15a8f96541f9214d5
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bk6:HwYqoEYIbUwF1VERmj2bZ
- TLSH T10BC6DF0177E49A31F1BB1A319A7586649A7B7C219F34C7CF23942E1D3E316D0AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory