General
- Target 2026-08-02_8a0f1448b357a6fad10c47147400a1c1_amadey_avoslocker_chir_coinminer_darkgate_elex_glassworm_helldown_hijackloader_luca-stealer_lynx_magniber_njrat_remcos_revil
- Size 29.7MB
- Sample260802-j9la9sfl6s
- SHA256 37b4f537f601e5f892889123847cdb7d5649ca979cb513ae9a5ecfd74719f27f
- MD5 8a0f1448b357a6fad10c47147400a1c1
- SHA1 3b5f6488ef052ffa10a93b95e34b533f3883e74c
- SHA512 98f3993f23ead2729f54732a391303e2177a77e2751a281a70d1cefffaf574249dd7cbcc69aaa6e39b4fe560309690ebbc6317ff2ee5c730111c2dd8b42cf345
- SSDEEP 393216:K0ykm9f7J7jD5ZgfaoZ8VIuf+Yl7KGQ2F+0fbLYZs3laoyrqN/7fFp7pSYAehYny:hykmNBD5yalfvRXFrIZsDF7T7DKAB
- TLSH T13567BF22B685C026D09201709579ABF68B79EC314B7243C772CC3E5EBF74AD12A35B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-02_8a0f1448b357a6fad10c47147400a1c1_amadey_avoslocker_chir_coinminer_darkgate_elex_glassworm.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_8a0f1448b357a6fad10c47147400a1c1_amadey_avoslocker_chir_coinminer_darkgate_elex_glassworm.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_8a0f1448b357a6fad10c47147400a1c1_amadey_avoslocker_chir_coinminer_darkgate_elex_glassworm_helldown_hijackloader_luca-stealer_lynx_magniber_njrat_remcos_revil
- Size 29.7MB
- SHA256 37b4f537f601e5f892889123847cdb7d5649ca979cb513ae9a5ecfd74719f27f
- MD5 8a0f1448b357a6fad10c47147400a1c1
- SHA1 3b5f6488ef052ffa10a93b95e34b533f3883e74c
- SHA512 98f3993f23ead2729f54732a391303e2177a77e2751a281a70d1cefffaf574249dd7cbcc69aaa6e39b4fe560309690ebbc6317ff2ee5c730111c2dd8b42cf345
- SSDEEP 393216:K0ykm9f7J7jD5ZgfaoZ8VIuf+Yl7KGQ2F+0fbLYZs3laoyrqN/7fFp7pSYAehYny:hykmNBD5yalfvRXFrIZsDF7T7DKAB
- TLSH T13567BF22B685C026D09201709579ABF68B79EC314B7243C772CC3E5EBF74AD12A35B67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers