General
- Target 2026-06-27_7c43145f07325e80681be90390effb95_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_medusalocker_mespinoza_njrat_remcos_revil
- Size 9.0MB
- Sample260629-ghphhaes3s
- SHA256 5510af8f8d526c0c2d39b8758b50e7eee8d1a0bb8d30bf80718b1044eb964526
- MD5 7c43145f07325e80681be90390effb95
- SHA1 04c41e5c474171eaa7084b2410e9acf0a845404a
- SHA512 ed4281633751df9944abb6ec16580cf87f6173f2ddd399cf12ce7908d5c9d9bef998205a3423978e11c3806effe6d39bc7aa8c4661f820a5c07184e81ffe9832
- SSDEEP 98304:QC/5NNWpmT8KhRpSpgaX4mVtu5zvawQIAnYbKdQRliDdD46Q4v3p0q7Xmm6lB1EH:94pm5bsSxmVtu5DawE0Rk7LWNlBQ8WZD
- TLSH T17096BF01A3E54225EBF30E356AF5166B887EBD276F34C5EB4184346E4A72DE1AE31313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-27_7c43145f07325e80681be90390effb95_coinminer_darkgate_elex_glassworm_hijackloader_luca-stea.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_7c43145f07325e80681be90390effb95_coinminer_darkgate_elex_glassworm_hijackloader_luca-stea.exe
Resource
win11ltsc2024-20260617-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_7c43145f07325e80681be90390effb95_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_medusalocker_mespinoza_njrat_remcos_revil
- Size 9.0MB
- SHA256 5510af8f8d526c0c2d39b8758b50e7eee8d1a0bb8d30bf80718b1044eb964526
- MD5 7c43145f07325e80681be90390effb95
- SHA1 04c41e5c474171eaa7084b2410e9acf0a845404a
- SHA512 ed4281633751df9944abb6ec16580cf87f6173f2ddd399cf12ce7908d5c9d9bef998205a3423978e11c3806effe6d39bc7aa8c4661f820a5c07184e81ffe9832
- SSDEEP 98304:QC/5NNWpmT8KhRpSpgaX4mVtu5zvawQIAnYbKdQRliDdD46Q4v3p0q7Xmm6lB1EH:94pm5bsSxmVtu5DawE0Rk7LWNlBQ8WZD
- TLSH T17096BF01A3E54225EBF30E356AF5166B887EBD276F34C5EB4184346E4A72DE1AE31313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.