General
- Target 2026-08-21_f3e3babac35e9be3f96fd735e23f5a18_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.0MB
- Sample260821-11z7hade69
- SHA256 6fce3c1a549d5dfd2e3c3c05c89413ac1a40cc4760cfd5c945e7a572a1553ef7
- MD5 f3e3babac35e9be3f96fd735e23f5a18
- SHA1 0ce4fd64a3ec07656b7515f328568d79af7c2928
- SHA512 160960a2cc3af16baa5f4c0181cfd5d5af0c837513a6f72b2c2c8b87311119907e147d2d71d070b3881bc8994bd652ab69128b4df426c1d33b591af520bdfcac
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bk7:HwYqoEYIbUwF1VERmj2bo
- TLSH T1EAC6CF0177E49A30F1BB1A319E7596649A7B7C219F34C7CF23942E1D3E71680AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-21_f3e3babac35e9be3f96fd735e23f5a18_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_f3e3babac35e9be3f96fd735e23f5a18_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_f3e3babac35e9be3f96fd735e23f5a18_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.0MB
- SHA256 6fce3c1a549d5dfd2e3c3c05c89413ac1a40cc4760cfd5c945e7a572a1553ef7
- MD5 f3e3babac35e9be3f96fd735e23f5a18
- SHA1 0ce4fd64a3ec07656b7515f328568d79af7c2928
- SHA512 160960a2cc3af16baa5f4c0181cfd5d5af0c837513a6f72b2c2c8b87311119907e147d2d71d070b3881bc8994bd652ab69128b4df426c1d33b591af520bdfcac
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bk7:HwYqoEYIbUwF1VERmj2bo
- TLSH T1EAC6CF0177E49A30F1BB1A319E7596649A7B7C219F34C7CF23942E1D3E71680AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory