General

  • Target
    2025-07-02_68ee0c2e9be8e9207efb732163f91039_amadey_black-basta_coinminer_darkgate_elex_hijackloader_luca-stealer_magniber_rhadamanthys_smoke-loader_stop
  • Size 5.8MB
  • Sample250702-dc3w6asks6
  • SHA256 61acdaf391863262c67b223cfc45a4aa41699c2dd81af7f9a3888f32d7fa2a1b
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      2025-07-02_68ee0c2e9be8e9207efb732163f91039_amadey_black-basta_coinminer_darkgate_elex_hijackloader_luca-stealer_magniber_rhadamanthys_smoke-loader_stop
    • Size 5.8MB
    • SHA256 61acdaf391863262c67b223cfc45a4aa41699c2dd81af7f9a3888f32d7fa2a1b
    • MD5 SHA1 SHA512 SSDEEP
    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks