General
- Target 2026-08-02_97c07395165ab9122c73ad9c73861a37_amadey_coinminer_darkgate_elex_glassworm_hellokitty_luca-stealer_lynx_manuscrypt_medusalocker_metamorfo_njrat_poet-rat_revil
- Size 25.9MB
- Sample260802-j6he7sff22
- SHA256 939e1c705c49b85b08d83b50cc7022412351051bfdfc0914fc5828036066b5d6
- MD5 97c07395165ab9122c73ad9c73861a37
- SHA1 f48e402c73d6f83d695237b1cfc02f93217d05a9
- SHA512 757f353ebbd93ee4ada9774ab91a3352ad7c04897a840e5721893cab998efda8492a673c248a67a759dba8208da62e0c51d73253dc2ba50554404e61b88dd5df
- SSDEEP 393216:pvQos4DNJsv6tWKFdu9CixzwQIN00Vfi7/oM/:5Yx9IW0Gd
- TLSH T16457AE52B64281B3D89683B18E2FD72FC139B811471582C3E39CAE5A5D753E21F3B64B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_97c07395165ab9122c73ad9c73861a37_amadey_coinminer_darkgate_elex_glassworm_hellokitty_luca.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_97c07395165ab9122c73ad9c73861a37_amadey_coinminer_darkgate_elex_glassworm_hellokitty_luca-stealer_lynx_manuscrypt_medusalocker_metamorfo_njrat_poet-rat_revil
- Size 25.9MB
- SHA256 939e1c705c49b85b08d83b50cc7022412351051bfdfc0914fc5828036066b5d6
- MD5 97c07395165ab9122c73ad9c73861a37
- SHA1 f48e402c73d6f83d695237b1cfc02f93217d05a9
- SHA512 757f353ebbd93ee4ada9774ab91a3352ad7c04897a840e5721893cab998efda8492a673c248a67a759dba8208da62e0c51d73253dc2ba50554404e61b88dd5df
- SSDEEP 393216:pvQos4DNJsv6tWKFdu9CixzwQIN00Vfi7/oM/:5Yx9IW0Gd
- TLSH T16457AE52B64281B3D89683B18E2FD72FC139B811471582C3E39CAE5A5D753E21F3B64B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.