General
- Target 2026-08-23_bb493f671681e686066fe49e75f7c2d9_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.7MB
- Sample260825-19e8pazbrh
- SHA256 4ea78992f1e8e9dedff5afb5c14ebec4e083e975584272261086841c278a1efe
- MD5 bb493f671681e686066fe49e75f7c2d9
- SHA1 e2153dc3801282babb4d406e637873c8daacd2ab
- SHA512 33b38d4cd20dac8a387ddf516feebfb26d5fea517d36d865960c79be8cb96cc698bdcbc7af6bd04c08b01520cd7a1acf2d270301ede83af72ca649d9f67acf8c
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdKdbNdCjW:HGIbUwF1VERmj2bdi
- TLSH T149D6DF0173E48575F1B36B35CEBA96219A7A7C219F34C38F1398161D1E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_bb493f671681e686066fe49e75f7c2d9_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_bb493f671681e686066fe49e75f7c2d9_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_bb493f671681e686066fe49e75f7c2d9_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.7MB
- SHA256 4ea78992f1e8e9dedff5afb5c14ebec4e083e975584272261086841c278a1efe
- MD5 bb493f671681e686066fe49e75f7c2d9
- SHA1 e2153dc3801282babb4d406e637873c8daacd2ab
- SHA512 33b38d4cd20dac8a387ddf516feebfb26d5fea517d36d865960c79be8cb96cc698bdcbc7af6bd04c08b01520cd7a1acf2d270301ede83af72ca649d9f67acf8c
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdKdbNdCjW:HGIbUwF1VERmj2bdi
- TLSH T149D6DF0173E48575F1B36B35CEBA96219A7A7C219F34C38F1398161D1E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory