General
- Target 2026-10-22_411606d0580b52b191ca3f0e31efd65c_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.5MB
- Sample261024-ssnvhact9q
- SHA256 820e4664fbc51e6665b9d6bd78f0785e6ae31160409f91afd9e6e3dd2ab2e7ad
- MD5 411606d0580b52b191ca3f0e31efd65c
- SHA1 33d7ed75a2b009735faea51f0794b1bc049a7ff4
- SHA512 8a6a69fc37b43b2b6cf6a4c5eb8a52a2d53dd36a8d56185320bd6ef0af22ac93e0f7216ace8efe2d74658cdbb8d4376826b2931896e0ec4d669ab88ff6b2b9df
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdpd2mHpbjN:HGIbUwF1VERmj2bUmHtR
- TLSH T1A0E6D00173E48175F1B7A635CA7A9631EA767C224F30D38F13949A5E1F336909A39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_411606d0580b52b191ca3f0e31efd65c_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_411606d0580b52b191ca3f0e31efd65c_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_411606d0580b52b191ca3f0e31efd65c_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 13.5MB
- SHA256 820e4664fbc51e6665b9d6bd78f0785e6ae31160409f91afd9e6e3dd2ab2e7ad
- MD5 411606d0580b52b191ca3f0e31efd65c
- SHA1 33d7ed75a2b009735faea51f0794b1bc049a7ff4
- SHA512 8a6a69fc37b43b2b6cf6a4c5eb8a52a2d53dd36a8d56185320bd6ef0af22ac93e0f7216ace8efe2d74658cdbb8d4376826b2931896e0ec4d669ab88ff6b2b9df
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdpd2mHpbjN:HGIbUwF1VERmj2bUmHtR
- TLSH T1A0E6D00173E48175F1B7A635CA7A9631EA767C224F30D38F13949A5E1F336909A39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory