General
- Target 2026-06-30_5eac75813d84de3313b58d36c37c8f81_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil_smoke-loader
- Size 3.4MB
- Sample260701-fdj7jsgv7x
- SHA256 ddc14a86e4d4f66909f004a24ec0664e9aaf2ff6421ba4a7dd21e3a0a4b88a17
- MD5 5eac75813d84de3313b58d36c37c8f81
- SHA1 39786ac7edc89d5955bc9c65ff6013d10fd3de1b
- SHA512 f9c9bd87bedfecefb3dc02f8608a5dfc0ce218077e5e3e4c99a8e156839c930777b1147736f1b232e3167f5e599531289f8cc695cb19a773df0135fc0632ed79
- SSDEEP 49152:UnbwJ8oixIEDYM6lSU2shd8zyjjfSlmnIjojXxuB2rW4tPVhfHyIlome:UnbYPaccWIjojXxe27Hh
- TLSH T130F5C012FF4284B1E9930237516AA77E8E3D9521573885C3C7942A7ACD312D16F3E3EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
2026-06-30_5eac75813d84de3313b58d36c37c8f81_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_5eac75813d84de3313b58d36c37c8f81_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win11ltsc2024-20260629-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_5eac75813d84de3313b58d36c37c8f81_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil_smoke-loader
- Size 3.4MB
- SHA256 ddc14a86e4d4f66909f004a24ec0664e9aaf2ff6421ba4a7dd21e3a0a4b88a17
- MD5 5eac75813d84de3313b58d36c37c8f81
- SHA1 39786ac7edc89d5955bc9c65ff6013d10fd3de1b
- SHA512 f9c9bd87bedfecefb3dc02f8608a5dfc0ce218077e5e3e4c99a8e156839c930777b1147736f1b232e3167f5e599531289f8cc695cb19a773df0135fc0632ed79
- SSDEEP 49152:UnbwJ8oixIEDYM6lSU2shd8zyjjfSlmnIjojXxuB2rW4tPVhfHyIlome:UnbYPaccWIjojXxe27Hh
- TLSH T130F5C012FF4284B1E9930237516AA77E8E3D9521573885C3C7942A7ACD312D16F3E3EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.