General
- Target 2026-07-03_0e9cfbfb5e53fe8abfe05a2c2527b5d3_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_mespinoza_njrat_remcos_revil
- Size 3.0MB
- Sample260703-txchpscy2v
- SHA256 9c96a5df3612c9947eb33718067e97a5f4d960f71eca848fec1c8a37284d27d9
- MD5 0e9cfbfb5e53fe8abfe05a2c2527b5d3
- SHA1 de8a6e0bc3270640401c07f8a1dbbd02b5819740
- SHA512 2867a14265029b553d5c255492d45a129f87890a3782621389a94413e47771ac3d7112f8d464a20bb774ad3db7c76affb773725a71880de9064b2568bb228c91
- SSDEEP 49152:8Fwj7LlRdhAL6dDa8kCofP6oOmbU0rqNQo4kgBvLVFEsPgFl0AhCxk3ot1NFcS8z:8FwjGfTO3SqOjFLA1Flh2k3
- TLSH T170E5C023FB8284B2E9930174456A6B7E497EBA301734C5D3DBD01A69CD311E1B63F39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-03_0e9cfbfb5e53fe8abfe05a2c2527b5d3_coinminer_darkgate_elex_glassworm_luca-stealer_medusaloc.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-03_0e9cfbfb5e53fe8abfe05a2c2527b5d3_coinminer_darkgate_elex_glassworm_luca-stealer_medusaloc.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-03_0e9cfbfb5e53fe8abfe05a2c2527b5d3_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_mespinoza_njrat_remcos_revil
- Size 3.0MB
- SHA256 9c96a5df3612c9947eb33718067e97a5f4d960f71eca848fec1c8a37284d27d9
- MD5 0e9cfbfb5e53fe8abfe05a2c2527b5d3
- SHA1 de8a6e0bc3270640401c07f8a1dbbd02b5819740
- SHA512 2867a14265029b553d5c255492d45a129f87890a3782621389a94413e47771ac3d7112f8d464a20bb774ad3db7c76affb773725a71880de9064b2568bb228c91
- SSDEEP 49152:8Fwj7LlRdhAL6dDa8kCofP6oOmbU0rqNQo4kgBvLVFEsPgFl0AhCxk3ot1NFcS8z:8FwjGfTO3SqOjFLA1Flh2k3
- TLSH T170E5C023FB8284B2E9930174456A6B7E497EBA301734C5D3DBD01A69CD311E1B63F39A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.