Analysis
- max time kernel
150s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/06/2026, 06:49
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-27_609d8075b11b4d462ad93d0d0874e4b8_amadey_coinminer_elex_hijackloader_luca-stealer_magniber_njrat_remcos.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_609d8075b11b4d462ad93d0d0874e4b8_amadey_coinminer_elex_hijackloader_luca-stealer_magniber_njrat_remcos.exe
Resource
win11ltsc2024-20260618-en
1 signatures
150 seconds
General
- Target 2026-06-27_609d8075b11b4d462ad93d0d0874e4b8_amadey_coinminer_elex_hijackloader_luca-stealer_magniber_njrat_remcos.exe
- Size 1.5MB
- Sample260629-hll28afv8s
- SHA256 662444e68a3ebd4a46721bcb3e80766a5e0a554197a19e592e9cf9d9a93eef5a
- MD5 609d8075b11b4d462ad93d0d0874e4b8
- SHA1 f0e6951af7341661cf2135d30748570f456f3f6e
- SHA512 321570359bcb5aea1c99739711db7c10a085e6c53a84b68297c70d4b46da9ede29860d4a6a3df9043a2184ac681a8ed267bbebd9c6d7f1c8a0e38291b3712d8c
- SSDEEP 24576:fRf6zfFelgPOuh520eaVZ31g4dpUTYQ5/JAi76zBYPGp/:fEzkRu3zD19UTTBr76zBYPGp/
- TLSH T17B654B20B646C637E96101B05B2C9E6B90687D301BA59CC7F3D40F2968F4ED39A36F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-06-27_609d8075b11b4d462ad93d0d0874e4b8_amadey_coinminer_elex_hijackloader_luca-stealer_magniber_njrat_remcos.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-27_609d8075b11b4d462ad93d0d0874e4b8_amadey_coinminer_elex_hijackloader_luca-stealer_magniber_njrat_remcos.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-27_609d8075b11b4d462ad93d0d0874e4b8_amadey_coinminer_elex_hijackloader_luca-stealer_magniber_njrat_remcos.exe"1⤵
- System Location Discovery: System Language Discovery
PID:3756