General
- Target 2026-07-06_c5728738620d99d7fa00d5edd99cd6b9_amadey_bkransomware_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_maze_metamorfo_njrat_pos_remcos_revil_smoke-loader_stealc
- Size 35.9MB
- Sample260707-bew6aabz3m
- SHA256 7908ac41391060a65109354d1f5b4f427645e54d45081c030c7d4f59348f4547
- MD5 c5728738620d99d7fa00d5edd99cd6b9
- SHA1 704dc7f35f220971ba81945b5c09015898af211b
- SHA512 b70af60765694918d5e2e0332eb8b7b08b711e320d581c2997f7ef4f192fc0ff1b7bc0ee269a5142c99793aeab9e371d92f027e2380d86ec7a56a3b82bf400e1
- SSDEEP 393216:UtAle0vUicxpX9XMnBgZJcED6cMBHweJlOxpX9X+ioV6rWwcmjsCGDjPNvB6mQrd:6wDrnBgZJYV6rWwc+sCGDjwv0uz
- TLSH T110877C027A908C32D4B26232CB6B1E61677ABC095F17C7D331CCBA942F356D26E3575A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
5 signatures
Behavioral task
behavioral1
Sample
2026-07-06_c5728738620d99d7fa00d5edd99cd6b9_amadey_bkransomware_coinminer_darkgate_elex_glassworm_hi.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_c5728738620d99d7fa00d5edd99cd6b9_amadey_bkransomware_coinminer_darkgate_elex_glassworm_hi.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_c5728738620d99d7fa00d5edd99cd6b9_amadey_bkransomware_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_maze_metamorfo_njrat_pos_remcos_revil_smoke-loader_stealc
- Size 35.9MB
- SHA256 7908ac41391060a65109354d1f5b4f427645e54d45081c030c7d4f59348f4547
- MD5 c5728738620d99d7fa00d5edd99cd6b9
- SHA1 704dc7f35f220971ba81945b5c09015898af211b
- SHA512 b70af60765694918d5e2e0332eb8b7b08b711e320d581c2997f7ef4f192fc0ff1b7bc0ee269a5142c99793aeab9e371d92f027e2380d86ec7a56a3b82bf400e1
- SSDEEP 393216:UtAle0vUicxpX9XMnBgZJcED6cMBHweJlOxpX9X+ioV6rWwcmjsCGDjPNvB6mQrd:6wDrnBgZJYV6rWwc+sCGDjwv0uz
- TLSH T110877C027A908C32D4B26232CB6B1E61677ABC095F17C7D331CCBA942F356D26E3575A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects encrypted or obfuscated .NET executables
-
Detects executables containing base64 encoded User Agent
-
Detects executables packed with Dotfuscator