General
- Target 2026-07-09_80f1ce95c6cf7427b314084385fdf1bb_coinminer_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_medusalocker_mespinoza_njrat_remcos_revil
- Size 5.0MB
- Sample260709-eby29ads4v
- SHA256 12300bb68245f26d5621eeed92421363e27a848877b5fdd6970e8f8509c13c76
- MD5 80f1ce95c6cf7427b314084385fdf1bb
- SHA1 c9638b7c726044f5fbabab2391828a5ad837ca23
- SHA512 8e1c741075fbe5b418f4da2046e8f7ab14688b27c85d87fb62b5eddd18a6823988f373599a78c6bfe3a8c631643f7e618980f9f3fbcb019e7736440c0ffc3a6e
- SSDEEP 98304:QWnarh9ERdbLXLKHMarE9lSMyxKsd3OsBh1MJ9gfKdFN:VarhST+HMafd3AJ9YIFN
- TLSH T19336BF12FA808072E5B3413882BAAB7B997DB9201734C5C7A3E42D794D716D17B3E35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-09_80f1ce95c6cf7427b314084385fdf1bb_coinminer_darkgate_elex_glassworm_hijackloader_icedid_lu.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-09_80f1ce95c6cf7427b314084385fdf1bb_coinminer_darkgate_elex_glassworm_hijackloader_icedid_lu.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-09_80f1ce95c6cf7427b314084385fdf1bb_coinminer_darkgate_elex_glassworm_hijackloader_icedid_luca-stealer_medusalocker_mespinoza_njrat_remcos_revil
- Size 5.0MB
- SHA256 12300bb68245f26d5621eeed92421363e27a848877b5fdd6970e8f8509c13c76
- MD5 80f1ce95c6cf7427b314084385fdf1bb
- SHA1 c9638b7c726044f5fbabab2391828a5ad837ca23
- SHA512 8e1c741075fbe5b418f4da2046e8f7ab14688b27c85d87fb62b5eddd18a6823988f373599a78c6bfe3a8c631643f7e618980f9f3fbcb019e7736440c0ffc3a6e
- SSDEEP 98304:QWnarh9ERdbLXLKHMarE9lSMyxKsd3OsBh1MJ9gfKdFN:VarhST+HMafd3AJ9YIFN
- TLSH T19336BF12FA808072E5B3413882BAAB7B997DB9201734C5C7A3E42D794D716D17B3E35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1