Analysis
- max time kernel
150s - max time network
147s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/08/2026, 02:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_37d599a5efdc0019a796e7e25fead913_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_stealc.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_37d599a5efdc0019a796e7e25fead913_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_stealc.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-03_37d599a5efdc0019a796e7e25fead913_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_stealc.exe
- Size 33.5MB
- Sample260803-da2ajsbk3w
- SHA256 8fb366739d5939eca0704a61d8b5376ba5b49ac7487be5758331ef6b4138248a
- MD5 37d599a5efdc0019a796e7e25fead913
- SHA1 3847b38b200cea248efb1e8f95a953e37a86db81
- SHA512 eec43d64bf15ac37aaaa256ef743a44f333594dd2aac0c056efb906fadc3905de08be1460eb008eded1ad0091367028ae329bea889b1bf9de58c899061fd76a6
- SSDEEP 393216:NwS8zpy63z179N0iEUPn9lBMXOWxbKJ325xCIu4MDKVwIXzObQ74hoJ6JL41nJwq:K863T6iPOJSCGB25Zo
- TLSH T1E877CF12E79640F2CB8715B928787B1E5B390B806B244FD7F25C2D69EE327C0B47B259
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Program crash 1 IoCs
pid pid_target Process procid_target 4348 4144 WerFault.exe 88
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_37d599a5efdc0019a796e7e25fead913_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_stealc.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_37d599a5efdc0019a796e7e25fead913_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_stealc.exe"1⤵PID:4144
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4144 -s 2282⤵
- Program crash
PID:4348
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 240 -p 4144 -ip 41441⤵PID:5412