General
- Target 2026-06-04_80e3cc6dfe72c2c60cbbdf17446fdb11_amadey_coinminer_cryptbot_darkgate_elex_glassworm_luca-stealer_magniber_njrat_poet-rat_smoke-loader
- Size 37.8MB
- Sample260604-dd9q4ahs6v
- SHA256 1fca6e0129136ea4467d3678d0d7d5a4b6e23ff7f2353592ae78eff42e224f17
- MD5 80e3cc6dfe72c2c60cbbdf17446fdb11
- SHA1 03493d07ecc68d7b2a9672f834be183d9d48f030
- SHA512 7b5d16133b0c14140e27583da2e53440b7a2fba10f7f7525baf5eb9142738f5968832e720caa87e54654665232f7551309197388ee762685603f410656b40ff1
- SSDEEP 393216:gF/t/V0/I/PpA5I2MsIy+13QSkB+62+qmQv12UOGI5gLs2N+kisjc9s:iyw3KjO3QSkuHv1oGIy3zNq
- TLSH T1B997E051FDCB80F2EA035830856B527F57315A064B24CAC7FA4CBE64EF776E21A36219
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-04_80e3cc6dfe72c2c60cbbdf17446fdb11_amadey_coinminer_cryptbot_darkgate_elex_glassworm_luca-s.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_80e3cc6dfe72c2c60cbbdf17446fdb11_amadey_coinminer_cryptbot_darkgate_elex_glassworm_luca-stealer_magniber_njrat_poet-rat_smoke-loader
- Size 37.8MB
- SHA256 1fca6e0129136ea4467d3678d0d7d5a4b6e23ff7f2353592ae78eff42e224f17
- MD5 80e3cc6dfe72c2c60cbbdf17446fdb11
- SHA1 03493d07ecc68d7b2a9672f834be183d9d48f030
- SHA512 7b5d16133b0c14140e27583da2e53440b7a2fba10f7f7525baf5eb9142738f5968832e720caa87e54654665232f7551309197388ee762685603f410656b40ff1
- SSDEEP 393216:gF/t/V0/I/PpA5I2MsIy+13QSkB+62+qmQv12UOGI5gLs2N+kisjc9s:iyw3KjO3QSkuHv1oGIy3zNq
- TLSH T1B997E051FDCB80F2EA035830856B527F57315A064B24CAC7FA4CBE64EF776E21A36219
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detects Windows executables referencing non-Windows User-Agents
Loads dropped DLL
Suspicious use of NtSetInformationThreadHideFromDebugger