General
- Target 2026-11-01_9d8f36fe3c69badb8defed4777da785d_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- Sample261102-qs772atyb1
- SHA256 3586942845f3e2314b302fe28737a78a05531f14b45a1434d50db1be872148e7
- MD5 9d8f36fe3c69badb8defed4777da785d
- SHA1 cd72b803322b68f1ef89f308895a45af6a570e73
- SHA512 fdd5bd8be016b70e6944498b11cba4e5b5477c1567ad8683cb69e72c35d9ee05cbac6e37c82f614f8db8abef84910af7b4fecbd9480973b41ba7dc591dc436cd
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdRdqjBS:HGIbUwF1VERmj2bAw
- TLSH T1A7D6D00173E48175F1B36635CEBA97259A7A7C219F34C38F13981A1D1E726D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-01_9d8f36fe3c69badb8defed4777da785d_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_9d8f36fe3c69badb8defed4777da785d_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_9d8f36fe3c69badb8defed4777da785d_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- SHA256 3586942845f3e2314b302fe28737a78a05531f14b45a1434d50db1be872148e7
- MD5 9d8f36fe3c69badb8defed4777da785d
- SHA1 cd72b803322b68f1ef89f308895a45af6a570e73
- SHA512 fdd5bd8be016b70e6944498b11cba4e5b5477c1567ad8683cb69e72c35d9ee05cbac6e37c82f614f8db8abef84910af7b4fecbd9480973b41ba7dc591dc436cd
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdRdqjBS:HGIbUwF1VERmj2bAw
- TLSH T1A7D6D00173E48175F1B36635CEBA97259A7A7C219F34C38F13981A1D1E726D0EA39B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies WinLogon for persistence
- Custom signature
UPX dump on OEP (original entry point)
Drops file in System32 directory