General

  • Target
    2026-09-08_4519eaa137e43d0e14bfd36bcc36c641_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
  • Size 12.0MB
  • Sample260908-v397lafn2v
  • SHA256 1f1375de7b0b9089cd654bb3b0d424a9a1a409b27c96a5b84a997f8c44ef0deb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-09-08_4519eaa137e43d0e14bfd36bcc36c641_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
    • Size 12.0MB
    • SHA256 1f1375de7b0b9089cd654bb3b0d424a9a1a409b27c96a5b84a997f8c44ef0deb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies WinLogon for persistence

    • UPX dump on OEP (original entry point)

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks