General
- Target 2026-10-26_5fe3cbf66f255013b36d51d45cf9bc81_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 10.4MB
- Sample261027-tnftrssz3n
- SHA256 1e02cd712f40c2f76f1b1e9434d8c6192a9ca7c38548f0e0e6e3d51155eb6976
- MD5 5fe3cbf66f255013b36d51d45cf9bc81
- SHA1 302dfbca8faa95f9834a9cbd73461c7425ed3827
- SHA512 769517c8f538b8f1753d29fb0c841afa18dbcd33f1ed86684aec40bfb897d447c4196caf33d7f9e96723957c530c12fc97e3934853d78b4e6c81294bc0eb990f
- SSDEEP 196608:HVmj5vjIjfeGZF6bUpMBF1p/kjRm4OWi2bYdh/:Hwtc7IbUwF1VERmj2bc
- TLSH T1E9B6DF0177E49A31F1B71A319A7992645A7BBC619F34C7CF23842E1D2E706D0EA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-26_5fe3cbf66f255013b36d51d45cf9bc81_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_5fe3cbf66f255013b36d51d45cf9bc81_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_5fe3cbf66f255013b36d51d45cf9bc81_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 10.4MB
- SHA256 1e02cd712f40c2f76f1b1e9434d8c6192a9ca7c38548f0e0e6e3d51155eb6976
- MD5 5fe3cbf66f255013b36d51d45cf9bc81
- SHA1 302dfbca8faa95f9834a9cbd73461c7425ed3827
- SHA512 769517c8f538b8f1753d29fb0c841afa18dbcd33f1ed86684aec40bfb897d447c4196caf33d7f9e96723957c530c12fc97e3934853d78b4e6c81294bc0eb990f
- SSDEEP 196608:HVmj5vjIjfeGZF6bUpMBF1p/kjRm4OWi2bYdh/:Hwtc7IbUwF1VERmj2bc
- TLSH T1E9B6DF0177E49A31F1B71A319A7992645A7BBC619F34C7CF23842E1D2E706D0EA35B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory