General
- Target 2026-07-04_2ce28ca2511f17f7a2c575e9228994f2_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_revil
- Size 3.7MB
- Sample260704-s52bcsds8p
- SHA256 859742a81936855a1b3863385c79c83dc6c9504692f9b7da553a0b466843a3c7
- MD5 2ce28ca2511f17f7a2c575e9228994f2
- SHA1 2378b5dd01cee5f0af4a78224024d8c6af26804e
- SHA512 74f96ce47eacf7c3f4edbc0253d4e8011a630810fd093aa671ddaf9d4db5e7f738faaef490223d48cfa3289cdc475dd8dd52da39e8ea065daf0155abbd7a1b7b
- SSDEEP 49152:g91VXDz0hDlEU7P8h6+cu/XntP/o+NEideyB6dCFc7mNAzJG:g91JU7P8vcu/to+qCww7
- TLSH T12F06BF11B69544B1F99202B4A5799B7A493FBC314B3CC8C3D3D02EAD98316C17B3A76B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-04_2ce28ca2511f17f7a2c575e9228994f2_amadey_coinminer_darkgate_elex_glassworm_hijackloader_lu.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_2ce28ca2511f17f7a2c575e9228994f2_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_njrat_revil
- Size 3.7MB
- SHA256 859742a81936855a1b3863385c79c83dc6c9504692f9b7da553a0b466843a3c7
- MD5 2ce28ca2511f17f7a2c575e9228994f2
- SHA1 2378b5dd01cee5f0af4a78224024d8c6af26804e
- SHA512 74f96ce47eacf7c3f4edbc0253d4e8011a630810fd093aa671ddaf9d4db5e7f738faaef490223d48cfa3289cdc475dd8dd52da39e8ea065daf0155abbd7a1b7b
- SSDEEP 49152:g91VXDz0hDlEU7P8h6+cu/XntP/o+NEideyB6dCFc7mNAzJG:g91JU7P8vcu/to+qCww7
- TLSH T12F06BF11B69544B1F99202B4A5799B7A493FBC314B3CC8C3D3D02EAD98316C17B3A76B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1