Analysis
- max time kernel
150s - max time network
116s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
21/07/2026, 17:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-21_5c58c1b5e720a8e2212172218a597cc9_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_5c58c1b5e720a8e2212172218a597cc9_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-07-21_5c58c1b5e720a8e2212172218a597cc9_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
- Size 37.0MB
- Sample260721-vvaf1a1fle
- SHA256 c28eb3e4f39fa0866e5e20d3c1469a71ea5f622311005df0545090b49a79d0d4
- MD5 5c58c1b5e720a8e2212172218a597cc9
- SHA1 e153fc9f9b4857b852b9fcda0a4786388f378343
- SHA512 cdd696ba97849bf9f5a810de0b0156769936b27fedf2f04cd74d8e536bc2d8bdc64d242b54e3a33e90a2fbd7225bd5856a19d0aae142ad5987b260950b91d969
- SSDEEP 393216:LudUk5aSGxA6YhqR8+nLplPAjQXzHBNmu6R39pz3L87MdnYfH3/tEvMOT9BkwU78:oUkMSIY88+nLrAP3jCOnAvdOTDU
- TLSH T1A387D022F910826EC9C501F16D7C6F2E2B3C5F541BA94BCB62CC6D6DBE314C26637A25
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4380 6048 WerFault.exe 87
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-21_5c58c1b5e720a8e2212172218a597cc9_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-21_5c58c1b5e720a8e2212172218a597cc9_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe"1⤵PID:6048
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 6048 -s 2282⤵
- Program crash
PID:4380
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 6048 -ip 60481⤵PID:5840