General
- Target 2026-07-30_56cd78e90b23dda6f843219515f88d00_amadey_coinminer_elex_glassworm_luca-stealer_njrat
- Size 2.0MB
- Sample260730-2fsscsgf62
- SHA256 f4fcf545e2ba8c7ceb359481fd2becc89860e2f8ace301dce2594d1bd73e5bb5
- MD5 56cd78e90b23dda6f843219515f88d00
- SHA1 9ec99859495c67568c8a9ce0a1bba5cdc7fa8131
- SHA512 39ca31bd8479588b85e8463dcb7db848677293ac031b3bfe01fe91fc83b98a49c7bdc852a6a1bf5f6da5abb4262afac2c82b5e25ad10ed5a6dbba474abae1d48
- SSDEEP 24576:bOfLiigQr+ssBTaZiTqLkWVOP5gquO3yvB3ZsTHZ8ceFAdDkMkUrQTJ/VPOp+RCK:1RBmrVOm0yp3ZoWTI4MkUrQF/VPHmA
- TLSH T19EA58D42F7C141B1E989093110AE7F768A6DD64CA730FEC3F6846B65AC201D2FA7979C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-30_56cd78e90b23dda6f843219515f88d00_amadey_coinminer_elex_glassworm_luca-stealer_njrat.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_56cd78e90b23dda6f843219515f88d00_amadey_coinminer_elex_glassworm_luca-stealer_njrat
- Size 2.0MB
- SHA256 f4fcf545e2ba8c7ceb359481fd2becc89860e2f8ace301dce2594d1bd73e5bb5
- MD5 56cd78e90b23dda6f843219515f88d00
- SHA1 9ec99859495c67568c8a9ce0a1bba5cdc7fa8131
- SHA512 39ca31bd8479588b85e8463dcb7db848677293ac031b3bfe01fe91fc83b98a49c7bdc852a6a1bf5f6da5abb4262afac2c82b5e25ad10ed5a6dbba474abae1d48
- SSDEEP 24576:bOfLiigQr+ssBTaZiTqLkWVOP5gquO3yvB3ZsTHZ8ceFAdDkMkUrQTJ/VPOp+RCK:1RBmrVOm0yp3ZoWTI4MkUrQF/VPHmA
- TLSH T19EA58D42F7C141B1E989093110AE7F768A6DD64CA730FEC3F6846B65AC201D2FA7979C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects binaries and memory artifacts referencing sandbox DLLs typically observed in sandbox evasion
-
Detects binaries and memory artifacts referencing sandbox product IDs
-
UPX dump on OEP (original entry point)