General
- Target 2026-07-06_20319f961cd511928fff4b9cf524e136_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_swisyn
- Size 4.8MB
- Sample260707-flyd5sas7w
- SHA256 9fc09a162c6b19063df515ff950c3dfbeb00081c227d38662da66e1e16b5deaa
- MD5 20319f961cd511928fff4b9cf524e136
- SHA1 1e4e3024dc4d4242ecf0d63d20932cc05ae00735
- SHA512 ed7a411849b3b18f72983161ff879b56effe345d68f19cca3b6c1eacdd66211734a41e85a533f6840703e3903768b69b385b9465ae8a94886553252c3ed594db
- SSDEEP 98304:Na4Xp6swNwda6YCeOqtg7Ur1ZqsacGlucxgP4:UdbOe5OUrLqjlucN
- TLSH T1B236BF927A40C0B5E14203706979BB7D49BDFEB01B21C5C36F842A5EC9B35D2AA37397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_20319f961cd511928fff4b9cf524e136_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_swisyn.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_20319f961cd511928fff4b9cf524e136_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_swisyn.exe
Resource
win11ltsc2024-20260706-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_20319f961cd511928fff4b9cf524e136_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_swisyn
- Size 4.8MB
- SHA256 9fc09a162c6b19063df515ff950c3dfbeb00081c227d38662da66e1e16b5deaa
- MD5 20319f961cd511928fff4b9cf524e136
- SHA1 1e4e3024dc4d4242ecf0d63d20932cc05ae00735
- SHA512 ed7a411849b3b18f72983161ff879b56effe345d68f19cca3b6c1eacdd66211734a41e85a533f6840703e3903768b69b385b9465ae8a94886553252c3ed594db
- SSDEEP 98304:Na4Xp6swNwda6YCeOqtg7Ur1ZqsacGlucxgP4:UdbOe5OUrLqjlucN
- TLSH T1B236BF927A40C0B5E14203706979BB7D49BDFEB01B21C5C36F842A5EC9B35D2AA37397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory