General
- Target 2026-05-11_7315fc89a9d9fdb2255560dee26f04ba_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat_qakbot
- Size 5.0MB
- Sample260511-mph7ysay3n
- SHA256 36cda6b6c07ef46e5d218bb0320f99d67b9bb4aa3892caee6582101ddcb1a3fa
- MD5 7315fc89a9d9fdb2255560dee26f04ba
- SHA1 96a67a3c9602d9972b92112fc11968cd3bcfb40d
- SHA512 41087dd1ea50700bde7dc5ecf93fa5aa19ad33a8e0cf37118769d874263e3b5383a25e9416f8573c5958f02aa9d0241476feb2c354722640c8174f28fc7af91a
- SSDEEP 98304:s6F1xh3MUZgmVsHGSyvQKG4nI+Tia60aKQwsNvwXhS:lvxpZXviaLa1Tq
- TLSH T1D236CF12FA41C071E9D2027565AFAB7A497EAE300739C4C397D43D6AD8311D33B3A79A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-11_7315fc89a9d9fdb2255560dee26f04ba_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat_qakbot.exe
Resource
win10v2004-20260130-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-11_7315fc89a9d9fdb2255560dee26f04ba_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat_qakbot.exe
Resource
win11-20260130-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_7315fc89a9d9fdb2255560dee26f04ba_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat_qakbot
- Size 5.0MB
- SHA256 36cda6b6c07ef46e5d218bb0320f99d67b9bb4aa3892caee6582101ddcb1a3fa
- MD5 7315fc89a9d9fdb2255560dee26f04ba
- SHA1 96a67a3c9602d9972b92112fc11968cd3bcfb40d
- SHA512 41087dd1ea50700bde7dc5ecf93fa5aa19ad33a8e0cf37118769d874263e3b5383a25e9416f8573c5958f02aa9d0241476feb2c354722640c8174f28fc7af91a
- SSDEEP 98304:s6F1xh3MUZgmVsHGSyvQKG4nI+Tia60aKQwsNvwXhS:lvxpZXviaLa1Tq
- TLSH T1D236CF12FA41C071E9D2027565AFAB7A497EAE300739C4C397D43D6AD8311D33B3A79A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL