General
- Target 2026-07-20_2fba0bb16b67e58ccb0d1d86478b57ba_amadey_coinminer_elex_glassworm_luca-stealer_njrat_qakbot_revil_smoke-loader
- Size 3.4MB
- Sample260720-dwfkzagv7s
- SHA256 e460d7e597730a15f1377d700bd98bbc4bfccf3816e7174e89c236ec079c39e2
- MD5 2fba0bb16b67e58ccb0d1d86478b57ba
- SHA1 5ea9e0cd3e5a81d25ab2df117cab2ce50cb620e8
- SHA512 c4458eabd9c95a26a2e6a3a1466df72cd8cde5f6baccac3d997eb470f7071979439c2321c6ccfd8fb77f67ec6810e8b398bb516185c7a028c569d4190eb6ab6a
- SSDEEP 49152:0vj9HjNZZIpT1EQkGok4PetnsXqDWtrOtPLGH1GJ5DmWV9SCbJB5AQMRHI1bNFW1:0vjFBIpT0GX4WtvDW49GHEHmcNFkg
- TLSH T1F7F5CF12FA4149B9E9D31174E2EF577A4A396F20033588C787D03FA99C325D2BA3E395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-20_2fba0bb16b67e58ccb0d1d86478b57ba_amadey_coinminer_elex_glassworm_luca-stealer_njrat_qakbot_revil_smoke-loader.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_2fba0bb16b67e58ccb0d1d86478b57ba_amadey_coinminer_elex_glassworm_luca-stealer_njrat_qakbot_revil_smoke-loader
- Size 3.4MB
- SHA256 e460d7e597730a15f1377d700bd98bbc4bfccf3816e7174e89c236ec079c39e2
- MD5 2fba0bb16b67e58ccb0d1d86478b57ba
- SHA1 5ea9e0cd3e5a81d25ab2df117cab2ce50cb620e8
- SHA512 c4458eabd9c95a26a2e6a3a1466df72cd8cde5f6baccac3d997eb470f7071979439c2321c6ccfd8fb77f67ec6810e8b398bb516185c7a028c569d4190eb6ab6a
- SSDEEP 49152:0vj9HjNZZIpT1EQkGok4PetnsXqDWtrOtPLGH1GJ5DmWV9SCbJB5AQMRHI1bNFW1:0vjFBIpT0GX4WtvDW49GHEHmcNFkg
- TLSH T1F7F5CF12FA4149B9E9D31174E2EF577A4A396F20033588C787D03FA99C325D2BA3E395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1