General
- Target 2026-05-09_b5c26a58b66b48264b20443f7113443b_amadey_coinminer_elex_glassworm_luca-stealer_njrat_qakbot_remcos
- Size 22.7MB
- Sample260509-mxrt3afv81
- SHA256 53e46d6016a15be37ab73780c5a89aec9c7224925790abf1a5b79bd6e49310f3
- MD5 b5c26a58b66b48264b20443f7113443b
- SHA1 f2df83705ee715f532379b2c1b536e4b709de3c4
- SHA512 b9e8a8e080ba64cc15d5d3d0ba956737e420081b697893d20f94679ea9d8c56796b0cf69373ad814d8a3661bdb4ca986b4cb818e938a81d91e964a82e0cdf497
- SSDEEP 393216:NkH8/3W6gassbzfIhibyxmsbVmaGxz56r2UP7NzQsy4UMOCdKcFD:qc/3WndcIhibyxmsAaakbPZzQsT5OCL
- TLSH T156371222FA82C172E5C20171A2BF8BFF1D395A340B2584E3A3D419ADD9705D3773A796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-09_b5c26a58b66b48264b20443f7113443b_amadey_coinminer_elex_glassworm_luca-stealer_njrat_qakbot_remcos.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-09_b5c26a58b66b48264b20443f7113443b_amadey_coinminer_elex_glassworm_luca-stealer_njrat_qakbot_remcos.exe
Resource
win11-20260130-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-09_b5c26a58b66b48264b20443f7113443b_amadey_coinminer_elex_glassworm_luca-stealer_njrat_qakbot_remcos
- Size 22.7MB
- SHA256 53e46d6016a15be37ab73780c5a89aec9c7224925790abf1a5b79bd6e49310f3
- MD5 b5c26a58b66b48264b20443f7113443b
- SHA1 f2df83705ee715f532379b2c1b536e4b709de3c4
- SHA512 b9e8a8e080ba64cc15d5d3d0ba956737e420081b697893d20f94679ea9d8c56796b0cf69373ad814d8a3661bdb4ca986b4cb818e938a81d91e964a82e0cdf497
- SSDEEP 393216:NkH8/3W6gassbzfIhibyxmsbVmaGxz56r2UP7NzQsy4UMOCdKcFD:qc/3WndcIhibyxmsAaakbPZzQsT5OCL
- TLSH T156371222FA82C172E5C20171A2BF8BFF1D395A340B2584E3A3D419ADD9705D3773A796
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger