General
- Target 2026-09-10_49184f1b32fe5efddad78d5174648f69_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 9.0MB
- Sample260910-vvbztsvzdv
- SHA256 78773acaf1f59e89ea47590b602d0464fe79fac75023741988719303b5c5e961
- MD5 49184f1b32fe5efddad78d5174648f69
- SHA1 5bd92e16a4f1415507473e769070af96e77de43f
- SHA512 f40c8f8093a5fa1978da6781dce13ebe7ea9ce99405b3d21a366ea101877d6eeefdda4064f4435b48b43c7bad66ee7450df0618c7f38cce50bdc4abe94289b99
- SSDEEP 98304:Hwoj5l8+4j7p7J+4jxde+4jgd67pM7pzdkdnA91pH2WpjHrgBZoj5lV7pndg+4j/:HVmj5Vjxd4jgdBdkdnmHpn6ADdOj/
- TLSH T12EA66C0173E48574F1BB96358A799631EAB77C124E3093CF13949E5E2F336909A39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-10_49184f1b32fe5efddad78d5174648f69_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-s.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_49184f1b32fe5efddad78d5174648f69_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-s.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_49184f1b32fe5efddad78d5174648f69_amadey_coinminer_elex_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_stop_vidar
- Size 9.0MB
- SHA256 78773acaf1f59e89ea47590b602d0464fe79fac75023741988719303b5c5e961
- MD5 49184f1b32fe5efddad78d5174648f69
- SHA1 5bd92e16a4f1415507473e769070af96e77de43f
- SHA512 f40c8f8093a5fa1978da6781dce13ebe7ea9ce99405b3d21a366ea101877d6eeefdda4064f4435b48b43c7bad66ee7450df0618c7f38cce50bdc4abe94289b99
- SSDEEP 98304:Hwoj5l8+4j7p7J+4jxde+4jgd67pM7pzdkdnA91pH2WpjHrgBZoj5lV7pndg+4j/:HVmj5Vjxd4jgdBdkdnmHpn6ADdOj/
- TLSH T12EA66C0173E48574F1BB96358A799631EAB77C124E3093CF13949E5E2F336909A39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory