General
- Target 2026-10-22_35713f2d9e213b159bf43fbf5305d275_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader_stop
- Size 17.0MB
- Sample261024-vfer6sa15t
- SHA256 6401c2142d804c2fc53740e7cf229e1de8ba11ccf082de7ce404ac9713b66b7e
- MD5 35713f2d9e213b159bf43fbf5305d275
- SHA1 a96ac26a521dd1f30e8284e949ba3949ab4c181b
- SHA512 eaf13d692bb951dccf494863402f2cae1f363cfb43e73eccc9cf8336429519bf1081fbc41e772231ae11089bf2ad4cf437431f05429d175fa9d972eaa44b57ac
- SSDEEP 393216:Hwtc7IbUwF1VERmj2bSIbUwF1VERmj2bHI:HzIY092bSIY092bo
- TLSH T1F607F00177E49A31F2BB1A319E7992645A7B7C619F3487CF23842E1D79706D0EA34B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_35713f2d9e213b159bf43fbf5305d275_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_luc.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_35713f2d9e213b159bf43fbf5305d275_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_luc.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_35713f2d9e213b159bf43fbf5305d275_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_luca-stealer_njrat_remcos_smoke-loader_stop
- Size 17.0MB
- SHA256 6401c2142d804c2fc53740e7cf229e1de8ba11ccf082de7ce404ac9713b66b7e
- MD5 35713f2d9e213b159bf43fbf5305d275
- SHA1 a96ac26a521dd1f30e8284e949ba3949ab4c181b
- SHA512 eaf13d692bb951dccf494863402f2cae1f363cfb43e73eccc9cf8336429519bf1081fbc41e772231ae11089bf2ad4cf437431f05429d175fa9d972eaa44b57ac
- SSDEEP 393216:Hwtc7IbUwF1VERmj2bSIbUwF1VERmj2bHI:HzIY092bSIY092bo
- TLSH T1F607F00177E49A31F2BB1A319E7992645A7B7C619F3487CF23842E1D79706D0EA34B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory