7f899683f5a63160b9daa91f4e89d6cecc854e765546163055df948c1de2e692 | Triage™

Login
Reports

Overview

overview

Static

static

3

2026-05-27...oc.exe

windows10-2004-x64

2026-05-27...oc.exe

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-27_0f457139baaf11ee88303c7859ca24e2_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_mespinoza_njrat_revil
Size 18.6MB
Sample260527-xd722sh151
SHA256 7f899683f5a63160b9daa91f4e89d6cecc854e765546163055df948c1de2e692
MD5 0f457139baaf11ee88303c7859ca24e2
SHA1 a53126a5d842193388b9995677ee5d2cbdd5853e
SHA512 c7b4ec93e7c23002777e984c3ebd2115c3a8c3d9461f8f34f151b3e8fd2649b1e4a2f325a64fde2ff2f6bcb7a0a2cf70476bfdb703f00eb7dafcd2432c0b69a9
SSDEEP 393216:l7BZaEqtNZcdmThdq2W0rkbasOHTVsCA6SUxD:nZLdQhdgiH9Ay
TLSH
T168171233BD479472E493023145ADB77E1FBDBE26272880D392C13A2569B12C15F3EA67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

defense_evasion discovery evasion trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-05-27_0f457139baaf11ee88303c7859ca24e2_coinminer_darkgate_elex_glassworm_luca-stealer_medusaloc.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

13 signatures

150 seconds

defense_evasion discovery evasion trojan

Behavioral task

behavioral2

Sample

2026-05-27_0f457139baaf11ee88303c7859ca24e2_coinminer_darkgate_elex_glassworm_luca-stealer_medusaloc.exe

Resource

win11-20260513-en

windows11-21h2-x64

12 signatures

150 seconds

defense_evasion discovery trojan

Malware Config

Targets

- Target
  2026-05-27_0f457139baaf11ee88303c7859ca24e2_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_mespinoza_njrat_revil
- Size 18.6MB
- SHA256 7f899683f5a63160b9daa91f4e89d6cecc854e765546163055df948c1de2e692
- MD5 0f457139baaf11ee88303c7859ca24e2
- SHA1 a53126a5d842193388b9995677ee5d2cbdd5853e
- SHA512 c7b4ec93e7c23002777e984c3ebd2115c3a8c3d9461f8f34f151b3e8fd2649b1e4a2f325a64fde2ff2f6bcb7a0a2cf70476bfdb703f00eb7dafcd2432c0b69a9
- SSDEEP 393216:l7BZaEqtNZcdmThdq2W0rkbasOHTVsCA6SUxD:nZLdQhdgiH9Ay
- TLSH
  T168171233BD479472E493023145ADB77E1FBDBE26272880D392C13A2569B12C15F3EA67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

defense_evasion discovery evasion trojan
- Modifies Windows Defender DisableAntiSpyware settings
  evasion trojan
- UAC bypass
  defense_evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  defense_evasion trojan
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Create or Modify System Process

Windows Service

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryevasiontrojan

behavioral2

defense_evasiondiscoverytrojan

© 2018-2026

Terms | Privacy