General

  • Target
    2026-07-08_bbc01b3f7cfea8e7d5cbdd85ac71f975_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_njrat_poet-rat_remcos_revil
  • Size 23.2MB
  • Sample260708-vh5rdacz4m
  • SHA256 d13054ca4cbf270b058a514f9d4a2b1131d19a753ebeb53d3aa81abc89d333b4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-08_bbc01b3f7cfea8e7d5cbdd85ac71f975_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_njrat_poet-rat_remcos_revil
    • Size 23.2MB
    • SHA256 d13054ca4cbf270b058a514f9d4a2b1131d19a753ebeb53d3aa81abc89d333b4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Contacts a large (30491) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v16

Tasks