General
- Target 2026-08-03_f4c7f39a9ed434b20ad5999a19b5b76f_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 2.5MB
- Sample260803-cglb8swdrd
- SHA256 d332b81ad71590a4e66b4b842648518247dbbe0e53309de39c42b5586291320e
- MD5 f4c7f39a9ed434b20ad5999a19b5b76f
- SHA1 7f219fec89064019c2d0fdbe5bb9ea149509d4f0
- SHA512 7ee0d8f075b4f17abd457efff754c37fdba802b3c1cfa8823cd856d2c59bfe133d9db4d2f7eeff74d6a3012377d2e2814c4c6231577cbb5e1bd84bfb1586bf08
- SSDEEP 49152:U7qsMO3gbU9QcwndN4/XOz66vnP7g5jA0wvXX1nbDPfMu+UFr0JdyYtPMFoXT/xF:xsMC0Uq/np6a70wvXlUvUF4hGFo
- TLSH T13FC5CF12FBC281B1E59301745567B73F8D7DBA34672889C7ABC01D298C316D16A3A3AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_f4c7f39a9ed434b20ad5999a19b5b76f_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_f4c7f39a9ed434b20ad5999a19b5b76f_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 2.5MB
- SHA256 d332b81ad71590a4e66b4b842648518247dbbe0e53309de39c42b5586291320e
- MD5 f4c7f39a9ed434b20ad5999a19b5b76f
- SHA1 7f219fec89064019c2d0fdbe5bb9ea149509d4f0
- SHA512 7ee0d8f075b4f17abd457efff754c37fdba802b3c1cfa8823cd856d2c59bfe133d9db4d2f7eeff74d6a3012377d2e2814c4c6231577cbb5e1bd84bfb1586bf08
- SSDEEP 49152:U7qsMO3gbU9QcwndN4/XOz66vnP7g5jA0wvXX1nbDPfMu+UFr0JdyYtPMFoXT/xF:xsMC0Uq/np6a70wvXlUvUF4hGFo
- TLSH T13FC5CF12FBC281B1E59301745567B73F8D7DBA34672889C7ABC01D298C316D16A3A3AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.