General
- Target 2026-11-01_fea696e416ba62f7fb2143a38242ff71_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.7MB
- Sample261102-bth7zagv4j
- SHA256 8a3d1b2d2795ff5057f0ee6318c575e3f01716ec078404bf18a0a8f232758f68
- MD5 fea696e416ba62f7fb2143a38242ff71
- SHA1 b5fc54b7c29ea4abffca01b59f28fd9bc747a035
- SHA512 4b5b49b3ed209433a9c915a697184adc76e09600ab6de5b12b0ecf75197079ae20a4df3d1e148e7ab9312f2d9a909d75b584891b9a704d25dd646a5b2075b951
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdRdqjcdCdW:HGIbUwF1VERmj2bA8
- TLSH T1F9D6D00173E48575F1B36635CEBA8621DA7A7C219F34C38F1398565E1E32690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-01_fea696e416ba62f7fb2143a38242ff71_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_fea696e416ba62f7fb2143a38242ff71_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_fea696e416ba62f7fb2143a38242ff71_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.7MB
- SHA256 8a3d1b2d2795ff5057f0ee6318c575e3f01716ec078404bf18a0a8f232758f68
- MD5 fea696e416ba62f7fb2143a38242ff71
- SHA1 b5fc54b7c29ea4abffca01b59f28fd9bc747a035
- SHA512 4b5b49b3ed209433a9c915a697184adc76e09600ab6de5b12b0ecf75197079ae20a4df3d1e148e7ab9312f2d9a909d75b584891b9a704d25dd646a5b2075b951
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdRdqjcdCdW:HGIbUwF1VERmj2bA8
- TLSH T1F9D6D00173E48575F1B36635CEBA8621DA7A7C219F34C38F1398565E1E32690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory