General
- Target 2026-08-01_a5c4179f02688068014e6356c639ee7e_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_revil
- Size 18.1MB
- Sample260802-aecafaak3y
- SHA256 b23bb4cc30ab6723abc31b410cd01d52ebbab30f0665b01286195e16eff0d9e5
- MD5 a5c4179f02688068014e6356c639ee7e
- SHA1 0fde9f1f6d9d4cd1cd2c415eb7d5ebee72b10917
- SHA512 9531c2efb11e6cb7e9438b8f6def2d839ec3312614bc0b4b0dafb21b53b583f4eb75b8e2e3aca2ad3503bd2ec384a3ae90cf0b0fe4104a9be2a7d8516bfaab1e
- SSDEEP 393216:kHR1hTSTG0J05lekUW3VP0m+DoOft5eYE2/a+8aLzov3qv0iq6JmYpleUBJ:kHRr2jJyDUWJuj1ffM3s0iqwmYpD
- TLSH T153171211BD824473E5630339569EB73E697EEA340B36D1D357C40A6D6C302E22B397AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_a5c4179f02688068014e6356c639ee7e_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_revil.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_a5c4179f02688068014e6356c639ee7e_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_revil.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_a5c4179f02688068014e6356c639ee7e_coinminer_darkgate_elex_glassworm_luca-stealer_mespinoza_njrat_revil
- Size 18.1MB
- SHA256 b23bb4cc30ab6723abc31b410cd01d52ebbab30f0665b01286195e16eff0d9e5
- MD5 a5c4179f02688068014e6356c639ee7e
- SHA1 0fde9f1f6d9d4cd1cd2c415eb7d5ebee72b10917
- SHA512 9531c2efb11e6cb7e9438b8f6def2d839ec3312614bc0b4b0dafb21b53b583f4eb75b8e2e3aca2ad3503bd2ec384a3ae90cf0b0fe4104a9be2a7d8516bfaab1e
- SSDEEP 393216:kHR1hTSTG0J05lekUW3VP0m+DoOft5eYE2/a+8aLzov3qv0iq6JmYpleUBJ:kHRr2jJyDUWJuj1ffM3s0iqwmYpD
- TLSH T153171211BD824473E5630339569EB73E697EEA340B36D1D357C40A6D6C302E22B397AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.