General
- Target 2026-07-18_b77eceff4cc735edfc031cf3cc6c0d14_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-stealer_medusalocker_njrat
- Size 9.9MB
- Sample260718-mla26sbx8x
- SHA256 7cbd95119ddc91330560f1bbdb3921230b6ba041022df4f3a88bfff062ba63a7
- MD5 b77eceff4cc735edfc031cf3cc6c0d14
- SHA1 a5ef1785fd415ed7bd595050e13f1c134aae321d
- SHA512 daacc90cb1507b8c3263ea583c49adfeb6c80353d8a48c8222bb00ff475096b5afdb3d74bddada9c04347edab579472f9347762fbb39e0613ba48d477cc97f9f
- SSDEEP 196608:233kmOY1STQDrCzZkRuAGpOpfwNbWBhvd/wrJawaST:2HkmOYwc/CjAaOdw1WBZd2a5I
- TLSH T1E8A61221B6B2C072D55652308B3DAFB645ECA734472091C7B3C45E2E6E316D3E236B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-18_b77eceff4cc735edfc031cf3cc6c0d14_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_b77eceff4cc735edfc031cf3cc6c0d14_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_b77eceff4cc735edfc031cf3cc6c0d14_amadey_coinminer_darkgate_elex_glassworm_graphican_luca-stealer_medusalocker_njrat
- Size 9.9MB
- SHA256 7cbd95119ddc91330560f1bbdb3921230b6ba041022df4f3a88bfff062ba63a7
- MD5 b77eceff4cc735edfc031cf3cc6c0d14
- SHA1 a5ef1785fd415ed7bd595050e13f1c134aae321d
- SHA512 daacc90cb1507b8c3263ea583c49adfeb6c80353d8a48c8222bb00ff475096b5afdb3d74bddada9c04347edab579472f9347762fbb39e0613ba48d477cc97f9f
- SSDEEP 196608:233kmOY1STQDrCzZkRuAGpOpfwNbWBhvd/wrJawaST:2HkmOYwc/CjAaOdw1WBZd2a5I
- TLSH T1E8A61221B6B2C072D55652308B3DAFB645ECA734472091C7B3C45E2E6E316D3E236B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1