General

  • Target
    2026-07-09_2e66fee53d77f6c04f55aa12486393a6_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_mespinoza_njrat_remcos_revil
  • Size 4.5MB
  • Sample260709-krhyvsfv8n
  • SHA256 008c266d13348c0681e2d3f99ed832124a8ae7b7c1851805959bd781d4d82325
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-09_2e66fee53d77f6c04f55aa12486393a6_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_mespinoza_njrat_remcos_revil
    • Size 4.5MB
    • SHA256 008c266d13348c0681e2d3f99ed832124a8ae7b7c1851805959bd781d4d82325
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks