General
- Target 2026-07-07_214189af4fd4df9b80dbc2b291d3a08a_amadey_blankgrabber_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_revil_smoke-loader
- Size 17.5MB
- Sample260707-qqbfaaay7x
- SHA256 0cec9f0f4ad8c5d0d5a7324fc08b2fd84dcaeb24e0d134662f0ff8afdcfd1e3e
- MD5 214189af4fd4df9b80dbc2b291d3a08a
- SHA1 9a98712a3c155112d400e80f2194c6c36bbca4e1
- SHA512 e2fde119c6d34b6c76af25e2b1f26e56aa653f880fe083eeb300fb7204a4e36a7b98f79f0123b3984fadde79c74b3e0f1fd5caf3f9860c20bbafc67e6adcf3e9
- SSDEEP 393216:qri6FTcNGYkPosqXhSPdHx7LqJsv6tWKFdu9C0s:Ci6xcZkPosqmbHs
- TLSH T11E07CFC2F68380F2E9961170517BA73F5B30B9054B1596E3A39C3ED9E9312D13A3B68D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-07_214189af4fd4df9b80dbc2b291d3a08a_amadey_blankgrabber_coinminer_darkgate_elex_glassworm_lu.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_214189af4fd4df9b80dbc2b291d3a08a_amadey_blankgrabber_coinminer_darkgate_elex_glassworm_lu.exe
Resource
win11ltsc2024-20260706-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_214189af4fd4df9b80dbc2b291d3a08a_amadey_blankgrabber_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_revil_smoke-loader
- Size 17.5MB
- SHA256 0cec9f0f4ad8c5d0d5a7324fc08b2fd84dcaeb24e0d134662f0ff8afdcfd1e3e
- MD5 214189af4fd4df9b80dbc2b291d3a08a
- SHA1 9a98712a3c155112d400e80f2194c6c36bbca4e1
- SHA512 e2fde119c6d34b6c76af25e2b1f26e56aa653f880fe083eeb300fb7204a4e36a7b98f79f0123b3984fadde79c74b3e0f1fd5caf3f9860c20bbafc67e6adcf3e9
- SSDEEP 393216:qri6FTcNGYkPosqXhSPdHx7LqJsv6tWKFdu9C0s:Ci6xcZkPosqmbHs
- TLSH T11E07CFC2F68380F2E9961170517BA73F5B30B9054B1596E3A39C3ED9E9312D13A3B68D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.