General
- Target 2026-07-02_732e0b48c284437f2f0a6a5c5225af07_amadey_avoslocker_coinminer_darkgate_elex_glassworm_helldown_hijackloader_luca-stealer_lynx_magniber_njrat_remcos_revil_smoke-loader
- Size 15.2MB
- Sample260702-gzv2lsay6m
- SHA256 20e7a5a35dd80cb8cc4da05b20572695ca0fc50d8618b0c933816a4fd08358b4
- MD5 732e0b48c284437f2f0a6a5c5225af07
- SHA1 b8ea7a5994dd83e2a07118f68a03973c0a41408a
- SHA512 975c8c0b3adfb9c307a44e59294410794ecf1c98cc43b106d88e8093025a0c317af392731337e302232dfde85a8d0c638e67484ad5d737dbde12f7591aaa836f
- SSDEEP 196608:NRPRRkAjgpoBMrvZvOHqCflRGRR7+wAupKVeCdhjuASHSRD9mCrBrqNLij16knzc:NlRqp+rlREd8gASKD9VBrqNxkz3sP
- TLSH T11AF6BE21BE42C07AD58201F0A92DABBE543DDA741B7580D7B3DC1E6C2B709C26A36F57
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-02_732e0b48c284437f2f0a6a5c5225af07_amadey_avoslocker_coinminer_darkgate_elex_glassworm_hell.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_732e0b48c284437f2f0a6a5c5225af07_amadey_avoslocker_coinminer_darkgate_elex_glassworm_hell.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_732e0b48c284437f2f0a6a5c5225af07_amadey_avoslocker_coinminer_darkgate_elex_glassworm_helldown_hijackloader_luca-stealer_lynx_magniber_njrat_remcos_revil_smoke-loader
- Size 15.2MB
- SHA256 20e7a5a35dd80cb8cc4da05b20572695ca0fc50d8618b0c933816a4fd08358b4
- MD5 732e0b48c284437f2f0a6a5c5225af07
- SHA1 b8ea7a5994dd83e2a07118f68a03973c0a41408a
- SHA512 975c8c0b3adfb9c307a44e59294410794ecf1c98cc43b106d88e8093025a0c317af392731337e302232dfde85a8d0c638e67484ad5d737dbde12f7591aaa836f
- SSDEEP 196608:NRPRRkAjgpoBMrvZvOHqCflRGRR7+wAupKVeCdhjuASHSRD9mCrBrqNLij16knzc:NlRqp+rlREd8gASKD9VBrqNxkz3sP
- TLSH T11AF6BE21BE42C07AD58201F0A92DABBE543DDA741B7580D7B3DC1E6C2B709C26A36F57
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.