General
- Target 2026-11-01_94ff554ae1d78381b5c048a000d83ab1_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- Sample261102-rs4ehscy2l
- SHA256 3676a6340f162919724b9b61dbfc58e5de16f426aaf5bc5de2a54e2b7cef4870
- MD5 94ff554ae1d78381b5c048a000d83ab1
- SHA1 556b045ac38d07d9711a01375ca835f56947bb45
- SHA512 a39d665d619ad37bba4cf1d9843b63e3363be0a9f5e7a36e411ed244ed7c178b5a7d8c826e240901790018f4f1329c90feff39ea732d1f7a6b615de37d18af9c
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdRdqjcdl:HGIbUwF1VERmj2bAm
- TLSH T17CD6D00173E48575F1B36635CEBA8625DA7A7C219F34C38F1398561E1E32690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-01_94ff554ae1d78381b5c048a000d83ab1_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-01_94ff554ae1d78381b5c048a000d83ab1_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_94ff554ae1d78381b5c048a000d83ab1_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 12.3MB
- SHA256 3676a6340f162919724b9b61dbfc58e5de16f426aaf5bc5de2a54e2b7cef4870
- MD5 94ff554ae1d78381b5c048a000d83ab1
- SHA1 556b045ac38d07d9711a01375ca835f56947bb45
- SHA512 a39d665d619ad37bba4cf1d9843b63e3363be0a9f5e7a36e411ed244ed7c178b5a7d8c826e240901790018f4f1329c90feff39ea732d1f7a6b615de37d18af9c
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdRdqjcdl:HGIbUwF1VERmj2bAm
- TLSH T17CD6D00173E48575F1B36635CEBA8625DA7A7C219F34C38F1398561E1E32690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory