General
- Target 2026-06-26_65de73b338db12f700a7270787fb5e56_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 1.1MB
- Sample260629-sv1bbagx2x
- SHA256 ecbafee354454e6bab3e0313e35b623e7eacdcff82d4046defee1e5c8a7bd207
- MD5 65de73b338db12f700a7270787fb5e56
- SHA1 668f99a65972cf6d19653b4574ac116371df50fa
- SHA512 01f64e5a04eaf43ad8644940a85e012ed57df9da932e86c1c8507cdfbec77e08ee6c8a60a0bdd9b40f69b532f7548661d6fac9d1f976f07c1206bda05e2aacba
- SSDEEP 24576:TO7onUFmkt6U8pe5yVKo1Jeg+vhq216Zn64oDYO4TZYi:eUUFmkt6U8pe5ysOwvN139UZY
- TLSH T18A359D2677D2803AE6B307314D39A29412BEB9B15E32CB5F67C8121E5FB06519F21B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-26_65de73b338db12f700a7270787fb5e56_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_65de73b338db12f700a7270787fb5e56_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 1.1MB
- SHA256 ecbafee354454e6bab3e0313e35b623e7eacdcff82d4046defee1e5c8a7bd207
- MD5 65de73b338db12f700a7270787fb5e56
- SHA1 668f99a65972cf6d19653b4574ac116371df50fa
- SHA512 01f64e5a04eaf43ad8644940a85e012ed57df9da932e86c1c8507cdfbec77e08ee6c8a60a0bdd9b40f69b532f7548661d6fac9d1f976f07c1206bda05e2aacba
- SSDEEP 24576:TO7onUFmkt6U8pe5yVKo1Jeg+vhq216Zn64oDYO4TZYi:eUUFmkt6U8pe5ysOwvN139UZY
- TLSH T18A359D2677D2803AE6B307314D39A29412BEB9B15E32CB5F67C8121E5FB06519F21B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE