General
- Target 2026-10-16_e19af4e3862e6624a018f93b78cbffc7_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- Sample261017-fd7b3sdb74
- SHA256 77dcd0077e8c4e53b5f689b0ce6e1d2a7e43267fdc1520a3e6a3c474e7fa2946
- MD5 e19af4e3862e6624a018f93b78cbffc7
- SHA1 0ed12eb12ac13eb289086394f6ee1991f636b7c0
- SHA512 913fa2773c8da611a40a6317d815d95bece4a542863cc8b072fbe2939c8038477159131014059f579967833d5585061ff04372fa19b7805983ab058964aa6e71
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdRdqjcdz:HGIbUwF1VERmj2bAo
- TLSH T159D6D00173E48575F1B36635CEBA8625DA7A7C219F34C38F1398561E1E32690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-16_e19af4e3862e6624a018f93b78cbffc7_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-16_e19af4e3862e6624a018f93b78cbffc7_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-16_e19af4e3862e6624a018f93b78cbffc7_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- SHA256 77dcd0077e8c4e53b5f689b0ce6e1d2a7e43267fdc1520a3e6a3c474e7fa2946
- MD5 e19af4e3862e6624a018f93b78cbffc7
- SHA1 0ed12eb12ac13eb289086394f6ee1991f636b7c0
- SHA512 913fa2773c8da611a40a6317d815d95bece4a542863cc8b072fbe2939c8038477159131014059f579967833d5585061ff04372fa19b7805983ab058964aa6e71
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdRdqjcdz:HGIbUwF1VERmj2bAo
- TLSH T159D6D00173E48575F1B36635CEBA8625DA7A7C219F34C38F1398561E1E32690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory