General
- Target 2026-07-06_b59ef9dc25c9a2d9c64f41f4e36c2a7f_acrstealer_amadey_coinminer_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 13.9MB
- Sample260706-y2kr4ads5x
- SHA256 94c0f79c06d0a25c74e9ea5948305006c84bef31bdcd58a0737e1697c0546c0e
- MD5 b59ef9dc25c9a2d9c64f41f4e36c2a7f
- SHA1 6a71d71eecf60bfd7a9684869e8e816c3b791285
- SHA512 a7a264b1b07c0c18512702598e59f1ce590a73daa565fe517b8365827c7a65493ce172dd964d823ba9d924fc99595f522cbd61b5e3c9aa1279d5340a7c796159
- SSDEEP 393216:DtpmdBDIikuh6pJ+o6SVP1CPwDvt3uFrCeP2NOUAQW:I6N6GW
- TLSH T103E6AE03B7859135E49B2A79146B97795D3E7E202B21CDD757B038AC4E306C2AE3E34E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
2026-07-06_b59ef9dc25c9a2d9c64f41f4e36c2a7f_acrstealer_amadey_coinminer_darkgate_elex_gcleaner_glass.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_b59ef9dc25c9a2d9c64f41f4e36c2a7f_acrstealer_amadey_coinminer_darkgate_elex_gcleaner_glass.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_b59ef9dc25c9a2d9c64f41f4e36c2a7f_acrstealer_amadey_coinminer_darkgate_elex_gcleaner_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 13.9MB
- SHA256 94c0f79c06d0a25c74e9ea5948305006c84bef31bdcd58a0737e1697c0546c0e
- MD5 b59ef9dc25c9a2d9c64f41f4e36c2a7f
- SHA1 6a71d71eecf60bfd7a9684869e8e816c3b791285
- SHA512 a7a264b1b07c0c18512702598e59f1ce590a73daa565fe517b8365827c7a65493ce172dd964d823ba9d924fc99595f522cbd61b5e3c9aa1279d5340a7c796159
- SSDEEP 393216:DtpmdBDIikuh6pJ+o6SVP1CPwDvt3uFrCeP2NOUAQW:I6N6GW
- TLSH T103E6AE03B7859135E49B2A79146B97795D3E7E202B21CDD757B038AC4E306C2AE3E34E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.