General
- Target 2026-04-15_1165fcb26205ebec18a15afe68dbbb89_amadey_coinminer_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 3.5MB
- Sample260415-lr74esd18z
- SHA256 af5c287b81c77a65b8c345f5cbda7c6adf736c0427078b972c756759711400f6
- MD5 1165fcb26205ebec18a15afe68dbbb89
- SHA1 b218eedc7d25caa071cbac0b2cc65b96554fd1c9
- SHA512 160492510efa8cbeedc8ceef4f5e671a40fe6d231e52bf7bae7ec03e8a3c903a4a051803762de72e4dd93482f64ff191af2e83bcb4f1f5f421c5d3f65aa7e5ea
- SSDEEP 49152:y4K51L28xbXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuHC4O8b8ITDnl27PLhh:/K5d2+bXsPN5kiQaZ5+
- TLSH T1EF06B22166D4CFE1D46F10B0DD66BAF6502BAD24CF564FCB6E803E1A35305D2AA31A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-15_1165fcb26205ebec18a15afe68dbbb89_amadey_coinminer_darkgate_elex_hellokitty_hijackloader_l.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_1165fcb26205ebec18a15afe68dbbb89_amadey_coinminer_darkgate_elex_hellokitty_hijackloader_luca-stealer_njrat_nymaim_remcos_rhadamanthys_smoke-loader
- Size 3.5MB
- SHA256 af5c287b81c77a65b8c345f5cbda7c6adf736c0427078b972c756759711400f6
- MD5 1165fcb26205ebec18a15afe68dbbb89
- SHA1 b218eedc7d25caa071cbac0b2cc65b96554fd1c9
- SHA512 160492510efa8cbeedc8ceef4f5e671a40fe6d231e52bf7bae7ec03e8a3c903a4a051803762de72e4dd93482f64ff191af2e83bcb4f1f5f421c5d3f65aa7e5ea
- SSDEEP 49152:y4K51L28xbXsPNIULkmp1/j6AeXZG7wmpvGF1IP9z5WuHC4O8b8ITDnl27PLhh:/K5d2+bXsPN5kiQaZ5+
- TLSH T1EF06B22166D4CFE1D46F10B0DD66BAF6502BAD24CF564FCB6E803E1A35305D2AA31A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Drops file in System32 directory