General
- Target 2026-08-20_33cd1bd57006eac5096dc899c580fdf9_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 8.2MB
- Sample260820-s683laer4s
- SHA256 f5f6ac774951deeacc2116e6d86651a9c7234d531b0553268154bcea9c387b73
- MD5 33cd1bd57006eac5096dc899c580fdf9
- SHA1 a7734c6d0de66beebaf2bb6fa7f9c5717e24c1e6
- SHA512 6fb16eacf05671540bea99f56918da853ecf45b4f75466bc95ff5ca5e73b310370848ef6ebad9de716789b1cde5d196c745e7b7cbf1f431189a6d670e256c6a4
- SSDEEP 98304:Hwoj5l8+4j7p7J+4jxde+4jgd67pM7pzdkdnA91pH2WpjHrgBZoj5lzp7R:HVmj5Vjxd4jgdBdkdnmHpn6AtR
- TLSH T1F6967C0173E48575F1BB9235CA7A9631EAB77C124E30938F1394DA5E2F336909939B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-20_33cd1bd57006eac5096dc899c580fdf9_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-s.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_33cd1bd57006eac5096dc899c580fdf9_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-s.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_33cd1bd57006eac5096dc899c580fdf9_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 8.2MB
- SHA256 f5f6ac774951deeacc2116e6d86651a9c7234d531b0553268154bcea9c387b73
- MD5 33cd1bd57006eac5096dc899c580fdf9
- SHA1 a7734c6d0de66beebaf2bb6fa7f9c5717e24c1e6
- SHA512 6fb16eacf05671540bea99f56918da853ecf45b4f75466bc95ff5ca5e73b310370848ef6ebad9de716789b1cde5d196c745e7b7cbf1f431189a6d670e256c6a4
- SSDEEP 98304:Hwoj5l8+4j7p7J+4jxde+4jgd67pM7pzdkdnA91pH2WpjHrgBZoj5lzp7R:HVmj5Vjxd4jgdBdkdnmHpn6AtR
- TLSH T1F6967C0173E48575F1BB9235CA7A9631EAB77C124E30938F1394DA5E2F336909939B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory