Analysis
- max time kernel
150s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/07/2026, 00:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
General
- Target 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe
- Size 9.7MB
- Sample260722-a1rbgswfmb
- SHA256 0193a58174469474805c2749284a1cdf9c9846338c076de24eb1f5ca322f8d7d
- MD5 db0b800116da5313f922c77d5306aa48
- SHA1 aaff0448fb4b16122b672be95661bae8f5c801ab
- SHA512 612cad41a7c05e6cc0e76aa080a8eb1b556d3901b083cfabcc2696dbcefb6f8f0e8b6d4a4a9890e620d0a330a107edf79e0158e383d3aec45e64af38e2474785
- SSDEEP 196608:cPx09F/Bsc9Q8M6Nj6iLLLhC66ZXABvqqGq:cEDm6h6iLfhC66ZX0r1
- TLSH T1E1A6CF22F941C031E9D201B2E6BD6FB6597D9D240B3858C3A7C45DB959306E33B3AB1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Checks whether UAC is enabled 1 TTPs 1 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\scripts\CoreScripts\Modules\TopBar\Thunks\RespawnCharacter.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\RbxDesignFoundations-31ab8d40-1.1.107\RbxDesignFoundations\tokens\Console\Dark\Semantic.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\ReactFocusNavigation\React.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\StudioContent\textures\TerrainTools\icon_terrain_big.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\textures\ui\Controls\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\BoolValue.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\Ribbon\Light\Standard\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\ApolloClient\ApolloClient\utilities\init.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\textures\ui\LuaChat\9-slice\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\api-ms-win-core-fibers-l1-1-1.dll 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Lua\AssetManager\Light\Standard\Menu.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Lua\StartPage\Light\Medium\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\Debugger\Light\Standard\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\SocialLibraries\SocialLibraries\RoactLayout\init.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\UGCValidation\UGCValidation\validation\validateAssetBounds.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\textures\ui\Controls\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\UISizeConstraint.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\scripts\CoreScripts\Modules\VR\Healthbar3D.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\ApolloClient\ApolloClient\optimism\helpers.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\scripts\CoreScripts\Modules\AvatarEditorPrompts\Components\ItemsList\init.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\ApolloClient\ApolloClient\utilities\graphql\directives.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\textures\ui\LuaChat\icons\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Button\ActionBar.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Lua\Notifications\Light\Large\UpdateFilledNegative.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\Alerts\Light\Large\Success.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\scripts\CoreScripts\Modules\EmotesMenu\Thunks\PlayEmote.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\scripts\CoreScripts\Modules\PlayerList\Components\Connection\GuiServiceConnector.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\textures\ui\PlayerList\developer.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\InsertableObjects\Light\Standard\AudioEcho.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\scripts\CoreScripts\Modules\TopBar\Actions\UpdateChatVisible.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\InlineLayout\InlineLayout\Utils\init.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\MarkdownCore\lock.toml 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\avatar\unification\UnificationServerScript.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\Ribbon\Dark\Standard\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\scripts\CoreScripts\Modules\AvatarContextMenu\ThemeHandler.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\scripts\CoreScripts\Modules\InspectAndBuy\Components\AvatarHeadShot.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Components\Dialog\useDialog.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\Foundation\Foundation\Providers\StudioWidgets\useWidgetsContext.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\Tile\PlayerTile\PlayerTile.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\textures\ui\Controls\DesignSystem\ButtonY.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\textures\ui\Settings\Radial\PlayerList.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\scripts\CoreScripts\Modules\DevConsole\Actions\SetDevConsolePosition.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\scripts\PlayerScripts\StarterPlayer\PlayerModule\CameraModule\Poppercam.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\fonts\RobotoCondensed-Regular.ttf 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\textures\ui\Controls\tab.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\textures\ui\VoiceChat\RedSpeakerDark\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\textures\ui\Controls\PlayStationController\PS4\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\scripts\CoreScripts\Modules\PublishAssetPrompt\Components\Common\LabeledTextBox.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\LuaRoactPolicyProvider\tutils.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\ReactIs\lock.toml 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\SocialLibraries\SocialLibraries\__tests__\UnitTestHelpers\expectedFields.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Lua\Explorer\Light\Standard\[email protected] 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\scripts\CoreScripts\Modules\Chrome\ChromeShared\Service\ShortcutService.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\RoactNavigation\RoactNavigation\views\RobloxStackView\StackViewCard.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\scripts\CoreScripts\Modules\Chrome\Flags\FFlagChatIntegrationFixShortcut.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\textures\ui\LuaChat\graphic\gr-profile-border-48x48-dotted.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\ExtraContent\LuaPackages\Packages\_Index\UIBlox\UIBlox\App\SelectionImage\CursorKind.lua 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\DraggerTools\Dark\Large\Select.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\FileSync\Dark\Standard\FileSyncStatus_Errored_Highlighted.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe File created C:\Program Files (x86)\Roblox\Versions\version-ed7d8193e8564b1f\content\studio_svg_textures\Shared\InsertableObjects\Dark\Standard\UnreliableRemoteEvent.png 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe - Enumerates system info in registry 2 TTPs 2 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\BaseBoardManufacturer 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5816 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe 5816 2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-22_db0b800116da5313f922c77d5306aa48_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_njrat.exe"1⤵
- Checks whether UAC is enabled
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
PID:5816