General
- Target 2026-06-26_a18718671df51c34951f70a3acfeffe6_amadey_bkransomware_coinminer_darkgate_dcrat_elex_glassworm_luca-stealer_maze_njrat_pos_quasar-rat_remcos_revil_smoke-loader_stealc_zxxz
- Size 26.4MB
- Sample260629-qs46dags9j
- SHA256 e76f9c4dedf830555ab8601f1e6b8fb57e326c54f6576faa56ac33a46eceaa2b
- MD5 a18718671df51c34951f70a3acfeffe6
- SHA1 cfdcc460886d6f379a13db88bcf80ca5fc79b8c3
- SHA512 68a1069231f684d8c5296f2f7198bc50dd13a08d3884850214e65f84ab3abcd1ab8914f6c633e1647d744d28016fa454e7933a78434b2c3a67a88cc1191bd3ff
- SSDEEP 786432:OlD5+gZJvwtKWKJ2Mc/8FLuTZ5pW3v0uR:BgZJv+KJ2Mc/8FLuTlq
- TLSH T11857BF1179D18831D5E31171CABE6BF9953D9D12032898C3768C3ED82F786E22736B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-26_a18718671df51c34951f70a3acfeffe6_amadey_bkransomware_coinminer_darkgate_dcrat_elex_glassw.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_a18718671df51c34951f70a3acfeffe6_amadey_bkransomware_coinminer_darkgate_dcrat_elex_glassw.exe
Resource
win11ltsc2024-20260618-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_a18718671df51c34951f70a3acfeffe6_amadey_bkransomware_coinminer_darkgate_dcrat_elex_glassworm_luca-stealer_maze_njrat_pos_quasar-rat_remcos_revil_smoke-loader_stealc_zxxz
- Size 26.4MB
- SHA256 e76f9c4dedf830555ab8601f1e6b8fb57e326c54f6576faa56ac33a46eceaa2b
- MD5 a18718671df51c34951f70a3acfeffe6
- SHA1 cfdcc460886d6f379a13db88bcf80ca5fc79b8c3
- SHA512 68a1069231f684d8c5296f2f7198bc50dd13a08d3884850214e65f84ab3abcd1ab8914f6c633e1647d744d28016fa454e7933a78434b2c3a67a88cc1191bd3ff
- SSDEEP 786432:OlD5+gZJvwtKWKJ2Mc/8FLuTZ5pW3v0uR:BgZJv+KJ2Mc/8FLuTlq
- TLSH T11857BF1179D18831D5E31171CABE6BF9953D9D12032898C3768C3ED82F786E22736B9B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects encrypted or obfuscated .NET executables