General
- Target 2026-06-27_c576e249d074950b4afc6c5c033c0a22_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_revil
- Size 19.1MB
- Sample260629-dmaclacz7j
- SHA256 a91c588498328c75e0382a382f133113126d6f999af9c1b25aaae260df393269
- MD5 c576e249d074950b4afc6c5c033c0a22
- SHA1 37338999a32cb7d611436e45a4f0b9138fc451b6
- SHA512 3c68badb499c156d998af5c93adf26b18fb517c6f7204623660e7d4bdab71308b37c7aa2b5807daa46dfae45558bf3589600451ad6339e9d6f11dc8e8ed281b5
- SSDEEP 393216:GJblVZFTBU2Ma7ny/Jsv6tWKFdu9C6p/g9:ylVZFD5R/
- TLSH T1EB17C092F7828072F4D241B511BBDB7B4B34A9241B2596C7F3D83E6999306D12B3F34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_c576e249d074950b4afc6c5c033c0a22_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_revil.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_c576e249d074950b4afc6c5c033c0a22_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_revil
- Size 19.1MB
- SHA256 a91c588498328c75e0382a382f133113126d6f999af9c1b25aaae260df393269
- MD5 c576e249d074950b4afc6c5c033c0a22
- SHA1 37338999a32cb7d611436e45a4f0b9138fc451b6
- SHA512 3c68badb499c156d998af5c93adf26b18fb517c6f7204623660e7d4bdab71308b37c7aa2b5807daa46dfae45558bf3589600451ad6339e9d6f11dc8e8ed281b5
- SSDEEP 393216:GJblVZFTBU2Ma7ny/Jsv6tWKFdu9C6p/g9:ylVZFD5R/
- TLSH T1EB17C092F7828072F4D241B511BBDB7B4B34A9241B2596C7F3D83E6999306D12B3F34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1