General
- Target 2026-07-27_77926a30881deef1d1520ff1d43bacae_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 2.4MB
- Sample260727-wnhpgabj71
- SHA256 bcf5a22090ae99dee1c51ea6d2b4268f0ffaf1f5b37ec8c57481cc6b6103d995
- MD5 77926a30881deef1d1520ff1d43bacae
- SHA1 d9d134e85283f08ade6d1fd868d82a4e54629b10
- SHA512 c0cfbe6721ac7cf593b861148831a9b7d8cf44887cebee9f559123f83a73007c044510cd008120c87375157d5ceb7a035c7d22d447b9d324a357515e451b4fb9
- SSDEEP 49152:8OMFLbaFbFgqiGNoJVil8V1VfO3YPfMM:oTqQpOInM
- TLSH T1EFC55C017681C83BC6720730CCB5D2F82579BD98ED224B5F7688FF9F3E316426A91669
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-27_77926a30881deef1d1520ff1d43bacae_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_77926a30881deef1d1520ff1d43bacae_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 2.4MB
- SHA256 bcf5a22090ae99dee1c51ea6d2b4268f0ffaf1f5b37ec8c57481cc6b6103d995
- MD5 77926a30881deef1d1520ff1d43bacae
- SHA1 d9d134e85283f08ade6d1fd868d82a4e54629b10
- SHA512 c0cfbe6721ac7cf593b861148831a9b7d8cf44887cebee9f559123f83a73007c044510cd008120c87375157d5ceb7a035c7d22d447b9d324a357515e451b4fb9
- SSDEEP 49152:8OMFLbaFbFgqiGNoJVil8V1VfO3YPfMM:oTqQpOInM
- TLSH T1EFC55C017681C83BC6720730CCB5D2F82579BD98ED224B5F7688FF9F3E316426A91669
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL