General
- Target 2026-09-19_df4fa4624b94b098a5192acadb90aa45_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader_stop
- Size 10.4MB
- Sample260919-ybllpsbd35
- SHA256 f75aff28863b61048c5bf22be79daae76cab9572346a6c94a284478d4f7cfa8c
- MD5 df4fa4624b94b098a5192acadb90aa45
- SHA1 65f68f861a965fe5a75e6e6c1f8f1397eec32377
- SHA512 320eda6fdcc74a914b28bee36315f20abad32e75b5f0dab263067d879895b4cac3697841163cdcd6a5faa30e5719fd7346d515cd34e7d08cbf2895c598957463
- SSDEEP 196608:HVmj5vjIjfeGZF6bUpMBF1p/kjRm4OWi2by2/5:Hwtc7IbUwF1VERmj2b5
- TLSH T10EB6DF0177E49A31F1B71A319E7A92645A7BBC619F3487CF23842E1D6D706D0EA34B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-19_df4fa4624b94b098a5192acadb90aa45_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_luc.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-19_df4fa4624b94b098a5192acadb90aa45_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_luc.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-19_df4fa4624b94b098a5192acadb90aa45_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader_stop
- Size 10.4MB
- SHA256 f75aff28863b61048c5bf22be79daae76cab9572346a6c94a284478d4f7cfa8c
- MD5 df4fa4624b94b098a5192acadb90aa45
- SHA1 65f68f861a965fe5a75e6e6c1f8f1397eec32377
- SHA512 320eda6fdcc74a914b28bee36315f20abad32e75b5f0dab263067d879895b4cac3697841163cdcd6a5faa30e5719fd7346d515cd34e7d08cbf2895c598957463
- SSDEEP 196608:HVmj5vjIjfeGZF6bUpMBF1p/kjRm4OWi2by2/5:Hwtc7IbUwF1VERmj2b5
- TLSH T10EB6DF0177E49A31F1B71A319E7A92645A7BBC619F3487CF23842E1D6D706D0EA34B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory