General
- Target 2026-07-06_843e9942f2f5297f6d5f1abbc7436495_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_metamorfo_njrat_revil_royal-ransom
- Size 4.2MB
- Sample260706-wlx2daex6q
- SHA256 c2e6e6d1fcd0306e9306855fcbecfcc34e52dc6518301ad946728ee36620e3b8
- MD5 843e9942f2f5297f6d5f1abbc7436495
- SHA1 b26f1f25e52de2f635459e1f7b51158b2b3308f1
- SHA512 66186157f02d154f29324931d8399d950b36dac740c9359af972a8b3b0e266d2b6ee1af5b8bebf0c01271e42f8b6cb2cf561380a4315f4d5e3ec7527956eaddf
- SSDEEP 98304:zdXDJlAT92txlYRI+E7rVV0CShAcHLBmfub0kr:zvlATgwaEAcdmfub9
- TLSH T1BA16CF11B645C0B1F59202F5A97CAB7F443DA9301B6989C7A3D03E6E48317C27B36BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_843e9942f2f5297f6d5f1abbc7436495_amadey_coinminer_darkgate_elex_glassworm_hijackloader_lu.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_843e9942f2f5297f6d5f1abbc7436495_amadey_coinminer_darkgate_elex_glassworm_hijackloader_lu.exe
Resource
win11ltsc2024-20260706-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_843e9942f2f5297f6d5f1abbc7436495_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_metamorfo_njrat_revil_royal-ransom
- Size 4.2MB
- SHA256 c2e6e6d1fcd0306e9306855fcbecfcc34e52dc6518301ad946728ee36620e3b8
- MD5 843e9942f2f5297f6d5f1abbc7436495
- SHA1 b26f1f25e52de2f635459e1f7b51158b2b3308f1
- SHA512 66186157f02d154f29324931d8399d950b36dac740c9359af972a8b3b0e266d2b6ee1af5b8bebf0c01271e42f8b6cb2cf561380a4315f4d5e3ec7527956eaddf
- SSDEEP 98304:zdXDJlAT92txlYRI+E7rVV0CShAcHLBmfub0kr:zvlATgwaEAcdmfub9
- TLSH T1BA16CF11B645C0B1F59202F5A97CAB7F443DA9301B6989C7A3D03E6E48317C27B36BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1