General
- Target 2026-07-23_c0e36f0d77c5a07aaccfa8b7dd5983d4_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.3MB
- Sample260723-fbwskadr2v
- SHA256 9e8cd3d2dd2c113094df61f4205294b4d4a82ea045de20868f06fa4f216c19c1
- MD5 c0e36f0d77c5a07aaccfa8b7dd5983d4
- SHA1 f4b79ca56334c2e2c7a21bf180de3a7d82fdaf7e
- SHA512 1b04155e5e6e32f9dec850cdd0a6e89318af045561516d08c53503f21a8e37b94ce6620708a466ce9de53452dce4e9ce9670664bb915f7d903c267d45b47b3af
- SSDEEP 98304:GOMZkM6EC8Xpk/mRuWsxjAK/859y8B2Yyjl:GBZC8X0RxjAoB8Z
- TLSH T13526AD62B940C422E8D20076E6BD5FF65C3D5E74973980D3AB913CA869305E3773E78A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_c0e36f0d77c5a07aaccfa8b7dd5983d4_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_c0e36f0d77c5a07aaccfa8b7dd5983d4_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader
- Size 4.3MB
- SHA256 9e8cd3d2dd2c113094df61f4205294b4d4a82ea045de20868f06fa4f216c19c1
- MD5 c0e36f0d77c5a07aaccfa8b7dd5983d4
- SHA1 f4b79ca56334c2e2c7a21bf180de3a7d82fdaf7e
- SHA512 1b04155e5e6e32f9dec850cdd0a6e89318af045561516d08c53503f21a8e37b94ce6620708a466ce9de53452dce4e9ce9670664bb915f7d903c267d45b47b3af
- SSDEEP 98304:GOMZkM6EC8Xpk/mRuWsxjAK/859y8B2Yyjl:GBZC8X0RxjAoB8Z
- TLSH T13526AD62B940C422E8D20076E6BD5FF65C3D5E74973980D3AB913CA869305E3773E78A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1