General
- Target 2026-08-09_37170fd340ce1101d529a87f6520096f_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.2MB
- Sample260809-hqj4essfrf
- SHA256 ced2cb0301651e23d06d96316d768c610d01c764cc865c389543f176563597de
- MD5 37170fd340ce1101d529a87f6520096f
- SHA1 445a084e6047ad350fb66f3a27820e45a857d471
- SHA512 e6ec4b3ae590945833fa125619f0823d7bd45b1cc06bfb22aedb6efa66e8a8fe0053c675583b5a758b11ee9d91a4cad017d22af5e3e89f148d8a9c0179b0d67c
- SSDEEP 196608:HV0dEdfdW8dJeGZF6bUpMBF1p/kjRm4OWi2b/Xcqjcd5W:HVIbUwF1VERmj2bhP
- TLSH T14FD6D00173E48175F1B35A35CEBA97259A7A7C219F34C38F13981A1D1E726D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-09_37170fd340ce1101d529a87f6520096f_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_37170fd340ce1101d529a87f6520096f_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_37170fd340ce1101d529a87f6520096f_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.2MB
- SHA256 ced2cb0301651e23d06d96316d768c610d01c764cc865c389543f176563597de
- MD5 37170fd340ce1101d529a87f6520096f
- SHA1 445a084e6047ad350fb66f3a27820e45a857d471
- SHA512 e6ec4b3ae590945833fa125619f0823d7bd45b1cc06bfb22aedb6efa66e8a8fe0053c675583b5a758b11ee9d91a4cad017d22af5e3e89f148d8a9c0179b0d67c
- SSDEEP 196608:HV0dEdfdW8dJeGZF6bUpMBF1p/kjRm4OWi2b/Xcqjcd5W:HVIbUwF1VERmj2bhP
- TLSH T14FD6D00173E48175F1B35A35CEBA97259A7A7C219F34C38F13981A1D1E726D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory