General
- Target 2026-04-25_6ad44e4bc6189350b3da4671b6418252_amadey_coinminer_elex_glassworm_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 4.0MB
- Sample260425-tkdv1afv2q
- SHA256 b1f2f66f9ac2c2e80e3206197c32ff25dfd5e89ed8a92cedcd7365d2b6c32f2c
- MD5 6ad44e4bc6189350b3da4671b6418252
- SHA1 b43c0d094dcb4da3110be5e398da51a14f673b23
- SHA512 fcc6287c923c314e2b0d7e3649f5a03a0d724eccf5a416ae43eaa776f7710f8cc3f02c8a918ba88c90bd7aa21f9c571c3f50c782d7ac5e9a6b3fdcc6b97a9751
- SSDEEP 98304:GstJM9vAsNi9Xwgwfo4L9IW1dXg3S/MHmguhn:tvM9i9XwgwAq9
- TLSH T14D16E4D2B5C29123CC6D4D718581AA30F9246FDF3E2E7587EE447A29AB7F1C0A52D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-25_6ad44e4bc6189350b3da4671b6418252_amadey_coinminer_elex_glassworm_luca-stealer_njrat_redli.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_6ad44e4bc6189350b3da4671b6418252_amadey_coinminer_elex_glassworm_luca-stealer_njrat_redli.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_6ad44e4bc6189350b3da4671b6418252_amadey_coinminer_elex_glassworm_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar
- Size 4.0MB
- SHA256 b1f2f66f9ac2c2e80e3206197c32ff25dfd5e89ed8a92cedcd7365d2b6c32f2c
- MD5 6ad44e4bc6189350b3da4671b6418252
- SHA1 b43c0d094dcb4da3110be5e398da51a14f673b23
- SHA512 fcc6287c923c314e2b0d7e3649f5a03a0d724eccf5a416ae43eaa776f7710f8cc3f02c8a918ba88c90bd7aa21f9c571c3f50c782d7ac5e9a6b3fdcc6b97a9751
- SSDEEP 98304:GstJM9vAsNi9Xwgwfo4L9IW1dXg3S/MHmguhn:tvM9i9XwgwAq9
- TLSH T14D16E4D2B5C29123CC6D4D718581AA30F9246FDF3E2E7587EE447A29AB7F1C0A52D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.