General
- Target 2026-10-22_2e1c27021364c660cd0be329d072fc7c_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 17.5MB
- Sample261024-wfw7wsfd78
- SHA256 9966e48ad0f7ae905af18ba155686a8a156f81d78bdea1acdcbe3ea231941244
- MD5 2e1c27021364c660cd0be329d072fc7c
- SHA1 8b73e5745fa83235ba6065407604f8ac7998a17a
- SHA512 a8fe8ed4f0d0ab6a2b7b44e315bb40e61b4f826300ee7b81dd1f1c336505cd546e2c568a01c7db552244636fefbced827c261012d33e50b06f6afd62e0b965ed
- SSDEEP 393216:Hwtc7IbUwF1VERmj2bSIbUwF1VERmj2b4:HzIY092bSIY092b4
- TLSH T19007F00277E49631F1B71A319E7992645A7BBC619E34C7CF23842E1D2E706D0EA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-22_2e1c27021364c660cd0be329d072fc7c_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-22_2e1c27021364c660cd0be329d072fc7c_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-22_2e1c27021364c660cd0be329d072fc7c_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 17.5MB
- SHA256 9966e48ad0f7ae905af18ba155686a8a156f81d78bdea1acdcbe3ea231941244
- MD5 2e1c27021364c660cd0be329d072fc7c
- SHA1 8b73e5745fa83235ba6065407604f8ac7998a17a
- SHA512 a8fe8ed4f0d0ab6a2b7b44e315bb40e61b4f826300ee7b81dd1f1c336505cd546e2c568a01c7db552244636fefbced827c261012d33e50b06f6afd62e0b965ed
- SSDEEP 393216:Hwtc7IbUwF1VERmj2bSIbUwF1VERmj2b4:HzIY092bSIY092b4
- TLSH T19007F00277E49631F1B71A319E7992645A7BBC619E34C7CF23842E1D2E706D0EA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory