General
- Target 2026-10-11_53f1229134c429749c191490c14430d8_coinminer_elex_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 6.6MB
- Sample261012-1dn6qa1vgv
- SHA256 3bbd9092fb9e7bbfd01de9a3e2da1fb20903a2b3ab3ad63d6a530cd33b35a554
- MD5 53f1229134c429749c191490c14430d8
- SHA1 4ee11c37f79a7a3fbcb8e14e645ab95a9266c940
- SHA512 e4d1745b590c87eaa3af9b88028a163a113af7a7eaeac6a3fc955715e183bb8fad24adcca2ea16901ce7bf6a75bb6469b478515496e51380dec2bd4096b2666f
- SSDEEP 98304:Hwoj5lQd67prdBxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/soj5lcd1:HV0d8dseGZF6bUpMBF1p/JQd1
- TLSH T14C66D002B7E480B5F1F36735DEB586219A7A7C629E30D20F13D8565D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-11_53f1229134c429749c191490c14430d8_coinminer_elex_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-11_53f1229134c429749c191490c14430d8_coinminer_elex_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-11_53f1229134c429749c191490c14430d8_coinminer_elex_hawkeye_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 6.6MB
- SHA256 3bbd9092fb9e7bbfd01de9a3e2da1fb20903a2b3ab3ad63d6a530cd33b35a554
- MD5 53f1229134c429749c191490c14430d8
- SHA1 4ee11c37f79a7a3fbcb8e14e645ab95a9266c940
- SHA512 e4d1745b590c87eaa3af9b88028a163a113af7a7eaeac6a3fc955715e183bb8fad24adcca2ea16901ce7bf6a75bb6469b478515496e51380dec2bd4096b2666f
- SSDEEP 98304:Hwoj5lQd67prdBxQeMjLsAAa/7JNzJwjI5klUigKYkBEvHPILz1p/soj5lcd1:HV0d8dseGZF6bUpMBF1p/JQd1
- TLSH T14C66D002B7E480B5F1F36735DEB586219A7A7C629E30D20F13D8565D0E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory