General
- Target 2026-08-31_4d0c285e117e5b4347242169d42097f6_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 14.3MB
- Sample260831-zc6hyaad25
- SHA256 ee38b653f911ec67edf17835893b4030f7ae18975ba58cb0cfd258aac3e07bb0
- MD5 4d0c285e117e5b4347242169d42097f6
- SHA1 d83af9b97a6cd797a7b3902df4c69aab88de1be7
- SHA512 1623170950185e29cf40e7c8c3c65d278cf17feeb06f94ad0bc3aff6fb12a7eeee2cb7a85d749aa2be1e7ca8092a4a9b04026557596be039a4c77203c57c1dd9
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdLdcRdSjdjdQjd:HGIbUwF1VERmj2bdcx
- TLSH T194E6CF0173E48575F1B35B35CEBA86259A7B7C219F34C38F13981A1D1E72690EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-31_4d0c285e117e5b4347242169d42097f6_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_4d0c285e117e5b4347242169d42097f6_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_4d0c285e117e5b4347242169d42097f6_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 14.3MB
- SHA256 ee38b653f911ec67edf17835893b4030f7ae18975ba58cb0cfd258aac3e07bb0
- MD5 4d0c285e117e5b4347242169d42097f6
- SHA1 d83af9b97a6cd797a7b3902df4c69aab88de1be7
- SHA512 1623170950185e29cf40e7c8c3c65d278cf17feeb06f94ad0bc3aff6fb12a7eeee2cb7a85d749aa2be1e7ca8092a4a9b04026557596be039a4c77203c57c1dd9
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdLdcRdSjdjdQjd:HGIbUwF1VERmj2bdcx
- TLSH T194E6CF0173E48575F1B35B35CEBA86259A7B7C219F34C38F13981A1D1E72690EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory