General
- Target 2026-08-19_5abca5d69c5a8452a7d8a6ba6769674e_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.0MB
- Sample260820-am895swhnd
- SHA256 b5750f88e47ec162d21723722f7199e566838ddf041d78860cf668657c21de6e
- MD5 5abca5d69c5a8452a7d8a6ba6769674e
- SHA1 3144dc180f5eff24d329d40346f98f229f4ead45
- SHA512 7658fa1bc6d2888bf16775b23c40bc2dc1b3275ebac8c9c2e49f8de38a746f310aa3514b2a5c4cc036b48b9b3e60c0c0c655e01d714fab8861d63a0328ec39ca
- SSDEEP 196608:HV0dEdfdW8dJeGZF6bUpMBF1p/kjRm4OWi2b/Xcqjcd5IjQ:HVIbUwF1VERmj2bhxk
- TLSH T19AD6DF0173E48535F1B75A358EBA96259A7B7C219F34C3CF23881A1D1E716D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-19_5abca5d69c5a8452a7d8a6ba6769674e_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_5abca5d69c5a8452a7d8a6ba6769674e_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_5abca5d69c5a8452a7d8a6ba6769674e_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.0MB
- SHA256 b5750f88e47ec162d21723722f7199e566838ddf041d78860cf668657c21de6e
- MD5 5abca5d69c5a8452a7d8a6ba6769674e
- SHA1 3144dc180f5eff24d329d40346f98f229f4ead45
- SHA512 7658fa1bc6d2888bf16775b23c40bc2dc1b3275ebac8c9c2e49f8de38a746f310aa3514b2a5c4cc036b48b9b3e60c0c0c655e01d714fab8861d63a0328ec39ca
- SSDEEP 196608:HV0dEdfdW8dJeGZF6bUpMBF1p/kjRm4OWi2b/Xcqjcd5IjQ:HVIbUwF1VERmj2bhxk
- TLSH T19AD6DF0173E48535F1B75A358EBA96259A7B7C219F34C3CF23881A1D1E716D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory