General
- Target 2026-08-14_57234f090ef0776b6e3fb0745d6d9cb3_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 12.5MB
- Sample260814-men1fshp4y
- SHA256 e00859b1c4c0a73e38b4100528036e565830ba2cff901d860a830304befd0703
- MD5 57234f090ef0776b6e3fb0745d6d9cb3
- SHA1 d58e9db9b1d3c992f959a03944cda2a0525fa4bf
- SHA512 e9362a4273f83db3d3e39bb2d11f1e1bf7967d9125ddf00e2de58467df588a317a20762d30392d2564e55bc6201e94636cac85ba4d0fbf0d4682d9b9a52332bc
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bGdwdm:HwYqoEYIbUwF1VERmj2bs
- TLSH T160D6CF02B3E49A70F1BB56359E7586619A7B7C219F30C7CF13942E1D3E31690AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-14_57234f090ef0776b6e3fb0745d6d9cb3_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_57234f090ef0776b6e3fb0745d6d9cb3_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_57234f090ef0776b6e3fb0745d6d9cb3_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 12.5MB
- SHA256 e00859b1c4c0a73e38b4100528036e565830ba2cff901d860a830304befd0703
- MD5 57234f090ef0776b6e3fb0745d6d9cb3
- SHA1 d58e9db9b1d3c992f959a03944cda2a0525fa4bf
- SHA512 e9362a4273f83db3d3e39bb2d11f1e1bf7967d9125ddf00e2de58467df588a317a20762d30392d2564e55bc6201e94636cac85ba4d0fbf0d4682d9b9a52332bc
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bGdwdm:HwYqoEYIbUwF1VERmj2bs
- TLSH T160D6CF02B3E49A70F1BB56359E7586619A7B7C219F30C7CF13942E1D3E31690AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory