General
- Target 2026-09-05_552d91b871b08dcf6adab3a6daa4e128_amadey_coinminer_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 20.9MB
- Sample260907-13zzhsvvdv
- SHA256 477780b71c89d5aecf472b37aa7712fe3aa15ba073e0abe9a3d5f7dde768ca7b
- MD5 552d91b871b08dcf6adab3a6daa4e128
- SHA1 32bfb30837560cdfc02b34f70852c790efd40145
- SHA512 afad716eba0924a5b510bf37e75eed71f3e09394ded28d23d1e9caadb683d2c3a54d45e3788350d4a74a65ff170ecd98237dca05acce2fa63ee63bccf311f6cf
- SSDEEP 98304:Zc1c1c1c1c1c1cFn7Os1MbQ9yDAD7KjjqkusjmqMh7:Zc1c1c1c1c1c1cFnSs1tIDewjqkjiqM5
- TLSH T143273919F94240F1E86A5470499BD2BED6707A11C5234FA7E689CECFFFE3A915C28231
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-05_552d91b871b08dcf6adab3a6daa4e128_amadey_coinminer_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_552d91b871b08dcf6adab3a6daa4e128_amadey_coinminer_elex_glassworm_hijackloader_icedid_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_552d91b871b08dcf6adab3a6daa4e128_amadey_coinminer_elex_glassworm_hijackloader_icedid_njrat_vidar
- Size 20.9MB
- SHA256 477780b71c89d5aecf472b37aa7712fe3aa15ba073e0abe9a3d5f7dde768ca7b
- MD5 552d91b871b08dcf6adab3a6daa4e128
- SHA1 32bfb30837560cdfc02b34f70852c790efd40145
- SHA512 afad716eba0924a5b510bf37e75eed71f3e09394ded28d23d1e9caadb683d2c3a54d45e3788350d4a74a65ff170ecd98237dca05acce2fa63ee63bccf311f6cf
- SSDEEP 98304:Zc1c1c1c1c1c1cFn7Os1MbQ9yDAD7KjjqkusjmqMh7:Zc1c1c1c1c1c1cFnSs1tIDewjqkjiqM5
- TLSH T143273919F94240F1E86A5470499BD2BED6707A11C5234FA7E689CECFFFE3A915C28231
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1