General
- Target 2026-08-23_99c62b348e2419656bf9139bbfec4f87_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 12.9MB
- Sample260825-25te7azerg
- SHA256 22be47f2c5bbd361e2f758826ee9f437c9fc8c0c56dd9774e400cbcb14a61c90
- MD5 99c62b348e2419656bf9139bbfec4f87
- SHA1 0cdb0d37653cf41e3bc15f79afb90847cd1bb5c0
- SHA512 a68d67e8500eb548fe090cf64fb79cab296fba7a377bcaae06fd7ce5f74c47eaff0d0eb7c5aa2f8a6e3294ab6448a03e7043198e1810b06ee54da9081f4570cd
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bGdRd9:HwYqoEYIbUwF1VERmj2bA
- TLSH T1A0D6CF0273E49A70F1BB57359E7586619A7B7C219F30C7CF23942E1D2E31690AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-23_99c62b348e2419656bf9139bbfec4f87_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_99c62b348e2419656bf9139bbfec4f87_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_99c62b348e2419656bf9139bbfec4f87_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 12.9MB
- SHA256 22be47f2c5bbd361e2f758826ee9f437c9fc8c0c56dd9774e400cbcb14a61c90
- MD5 99c62b348e2419656bf9139bbfec4f87
- SHA1 0cdb0d37653cf41e3bc15f79afb90847cd1bb5c0
- SHA512 a68d67e8500eb548fe090cf64fb79cab296fba7a377bcaae06fd7ce5f74c47eaff0d0eb7c5aa2f8a6e3294ab6448a03e7043198e1810b06ee54da9081f4570cd
- SSDEEP 196608:HVmj0dhj+jtdVdEjwjYeGZF6bUpMBF1p/kjRm4OWi2bGdRd9:HwYqoEYIbUwF1VERmj2bA
- TLSH T1A0D6CF0273E49A70F1BB57359E7586619A7B7C219F30C7CF23942E1D2E31690AA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory