General
- Target 2026-11-09_6bcb55453dd600ad1494d2bd0cab9ef2_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 14.1MB
- Sample261110-vec7ysgh65
- SHA256 3b0c5080f25ed577a25fa3b4148be02e8d936b568acfdbeadfc1c6844ca02e05
- MD5 6bcb55453dd600ad1494d2bd0cab9ef2
- SHA1 eeb4a95451368c399fb7bf6b56502296a974d300
- SHA512 d85714ca1166756509ddc21afeab0697dc22a445c6b55ea9ceafd9c218e6c11d90e3334c0a994173ed6f1b519e284153faa9cffebdf65f057370ec8d927b2893
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdRdqjcdCdOd99:HGIbUwF1VERmj2bAa
- TLSH T1EBE6CF0273E48175F1B36735CEB686219A7A7C229F34C38F1398565D1E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_6bcb55453dd600ad1494d2bd0cab9ef2_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_6bcb55453dd600ad1494d2bd0cab9ef2_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_ice.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_6bcb55453dd600ad1494d2bd0cab9ef2_amadey_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_stop_vidar
- Size 14.1MB
- SHA256 3b0c5080f25ed577a25fa3b4148be02e8d936b568acfdbeadfc1c6844ca02e05
- MD5 6bcb55453dd600ad1494d2bd0cab9ef2
- SHA1 eeb4a95451368c399fb7bf6b56502296a974d300
- SHA512 d85714ca1166756509ddc21afeab0697dc22a445c6b55ea9ceafd9c218e6c11d90e3334c0a994173ed6f1b519e284153faa9cffebdf65f057370ec8d927b2893
- SSDEEP 196608:HV0dEdfdWfm8eGZF6bUpMBF1p/kjRm4OWi2bLdRdqjcdCdOd99:HGIbUwF1VERmj2bAa
- TLSH T1EBE6CF0273E48175F1B36735CEB686219A7A7C229F34C38F1398565D1E72690EA39B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies WinLogon for persistence
- Custom signature
UPX dump on OEP (original entry point)
Drops file in System32 directory