General
- Target 2026-10-19_aafb02a43574f5382e0d28f4feb91b60_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.9MB
- Sample261020-m39xtsbb64
- SHA256 593b56c0db730f35f2360019b85f4f2202755fdfbc98d694a3e1b9a0d46e2111
- MD5 aafb02a43574f5382e0d28f4feb91b60
- SHA1 dbb720b43ba7a2ba4d9fd1e935a5108268c0bf83
- SHA512 a7bf61c56e3c33c65fbacdb39ef493810057998a635b2f4657bab3b31415d038b286f0bd3b79b067a9f846fa18054b8621214621a6e224f038f634cef1f96b5b
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdpd2mHpbjLr:HGIbUwF1VERmj2bUmHtL
- TLSH T1ACE6D00173E48175F1B79635CA7A9631EA7A7C224F30D38F13948A5E1F736909A39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-19_aafb02a43574f5382e0d28f4feb91b60_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-19_aafb02a43574f5382e0d28f4feb91b60_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-19_aafb02a43574f5382e0d28f4feb91b60_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.9MB
- SHA256 593b56c0db730f35f2360019b85f4f2202755fdfbc98d694a3e1b9a0d46e2111
- MD5 aafb02a43574f5382e0d28f4feb91b60
- SHA1 dbb720b43ba7a2ba4d9fd1e935a5108268c0bf83
- SHA512 a7bf61c56e3c33c65fbacdb39ef493810057998a635b2f4657bab3b31415d038b286f0bd3b79b067a9f846fa18054b8621214621a6e224f038f634cef1f96b5b
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdpd2mHpbjLr:HGIbUwF1VERmj2bUmHtL
- TLSH T1ACE6D00173E48175F1B79635CA7A9631EA7A7C224F30D38F13948A5E1F736909A39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory