General
- Target 2026-06-27_80ff289c14207b1546d847d51167c737_amadey_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 4.4MB
- Sample260629-ga6rtafv6r
- SHA256 5508459eac72468c2c698e279d381097495f661b309aba258a67c67f0fe7ce5f
- MD5 80ff289c14207b1546d847d51167c737
- SHA1 299ad9c7ea09da7729aae7c72f6b751c5f53d505
- SHA512 837bde7fd022d9ad2b5eb2b26b60cd48ce0e8f6967c263d4b7fa4fe298fe522478e2399e50923bb0e4d0ca5cfac1a68d6c5d0bc7ef5bd47ad17bcbbeee828099
- SSDEEP 49152:vJtBhaHScSvbDwEVCnGk7bGhiGCEwx4DSP9++7g8W5aaHKMkYZPSd9etTZZV69:vBhaycSPsfGhUqDC968HOzgd9s/K
- TLSH T12F26BF02BA81C4B2C2630371495677BB597FAE307B35E2C397942E2E5D305D1B63B7A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-27_80ff289c14207b1546d847d51167c737_amadey_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_80ff289c14207b1546d847d51167c737_amadey_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260618-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_80ff289c14207b1546d847d51167c737_amadey_coinminer_elex_glassworm_luca-stealer_mespinoza_njrat_remcos_smoke-loader
- Size 4.4MB
- SHA256 5508459eac72468c2c698e279d381097495f661b309aba258a67c67f0fe7ce5f
- MD5 80ff289c14207b1546d847d51167c737
- SHA1 299ad9c7ea09da7729aae7c72f6b751c5f53d505
- SHA512 837bde7fd022d9ad2b5eb2b26b60cd48ce0e8f6967c263d4b7fa4fe298fe522478e2399e50923bb0e4d0ca5cfac1a68d6c5d0bc7ef5bd47ad17bcbbeee828099
- SSDEEP 49152:vJtBhaHScSvbDwEVCnGk7bGhiGCEwx4DSP9++7g8W5aaHKMkYZPSd9etTZZV69:vBhaycSPsfGhUqDC968HOzgd9s/K
- TLSH T12F26BF02BA81C4B2C2630371495677BB597FAE307B35E2C397942E2E5D305D1B63B7A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.