General
- Target 2026-05-11_3feae916b8091362ebf5efda73b87621_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_revil_royal-ransom
- Size 5.5MB
- Sample260511-d45vtsd19q
- SHA256 e300dcc838fefa9abadbda12af853a0b83a0927a027d16065c54961766d27eca
- MD5 3feae916b8091362ebf5efda73b87621
- SHA1 4553a25ea2f2793355eeb9a490f99e72743a85fa
- SHA512 bff8d0c8331e2d058506e0d293849d588dba33a84b3e80c979bdb54f1131a369a0596cffe79c29c28da1417b5f1a84df54315357e92cec1a42ccc7ccfa7cc03e
- SSDEEP 98304:8tX28DwStyL/owSpO27bMz49JOrLhPGnxXjqpP4ox+X7BrWc8WboB1fJ4k:8w8DbyL/vmO27bMseymbjc8mOfJ4
- TLSH T18F46BF217641C172E99201B1A67CABFE497DA9311B2A54CBF3D41F6E19306C23F3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_3feae916b8091362ebf5efda73b87621_amadey_coinminer_darkgate_elex_glassworm_hijackloader_lu.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_3feae916b8091362ebf5efda73b87621_amadey_coinminer_darkgate_elex_glassworm_hijackloader_lu.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_3feae916b8091362ebf5efda73b87621_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_revil_royal-ransom
- Size 5.5MB
- SHA256 e300dcc838fefa9abadbda12af853a0b83a0927a027d16065c54961766d27eca
- MD5 3feae916b8091362ebf5efda73b87621
- SHA1 4553a25ea2f2793355eeb9a490f99e72743a85fa
- SHA512 bff8d0c8331e2d058506e0d293849d588dba33a84b3e80c979bdb54f1131a369a0596cffe79c29c28da1417b5f1a84df54315357e92cec1a42ccc7ccfa7cc03e
- SSDEEP 98304:8tX28DwStyL/owSpO27bMz49JOrLhPGnxXjqpP4ox+X7BrWc8WboB1fJ4k:8w8DbyL/vmO27bMseymbjc8mOfJ4
- TLSH T18F46BF217641C172E99201B1A67CABFE497DA9311B2A54CBF3D41F6E19306C23F3A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory