General
- Target 2026-08-03_9d1535aad03b11f77d61826d719066d5_amadey_avoslocker_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_metamorfo_njrat_pos_remcos_revil_smoke-loader
- Size 44.2MB
- Sample260804-mmndwstvdx
- SHA256 9e110fb26dba4c48846fc37581c889f5b70afb4d4b7aaf8962f75499a9671d41
- MD5 9d1535aad03b11f77d61826d719066d5
- SHA1 32ba3bf8cf1d31ca702103723cd939d22b64080b
- SHA512 c3674d10d8a2d8e3634a440ba9d5cc51ced28d0168d6e6c310a02c3b7d4ccbca2ebbf2422a880fdf476a22d64074d39836421ce64f42bd5f3c1ef2ca68306891
- SSDEEP 393216:ZT3TxzDnqqr++Wb2EqJS0fKSYIVgZJbPDSHc7/QarFYb2EqJS0fKSopdSnvCzAVC:dT5BlW9mVgZJu93Q5/bthLjBv0u0
- TLSH T139A78E0279E08821D4B22231C76B1EA1677ABC156B66C7D732CC77A82F356C26F3571E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-03_9d1535aad03b11f77d61826d719066d5_amadey_avoslocker_coinminer_darkgate_elex_glassworm_hija.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_9d1535aad03b11f77d61826d719066d5_amadey_avoslocker_coinminer_darkgate_elex_glassworm_hija.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_9d1535aad03b11f77d61826d719066d5_amadey_avoslocker_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_lynx_metamorfo_njrat_pos_remcos_revil_smoke-loader
- Size 44.2MB
- SHA256 9e110fb26dba4c48846fc37581c889f5b70afb4d4b7aaf8962f75499a9671d41
- MD5 9d1535aad03b11f77d61826d719066d5
- SHA1 32ba3bf8cf1d31ca702103723cd939d22b64080b
- SHA512 c3674d10d8a2d8e3634a440ba9d5cc51ced28d0168d6e6c310a02c3b7d4ccbca2ebbf2422a880fdf476a22d64074d39836421ce64f42bd5f3c1ef2ca68306891
- SSDEEP 393216:ZT3TxzDnqqr++Wb2EqJS0fKSYIVgZJbPDSHc7/QarFYb2EqJS0fKSopdSnvCzAVC:dT5BlW9mVgZJu93Q5/bthLjBv0u0
- TLSH T139A78E0279E08821D4B22231C76B1EA1677ABC156B66C7D732CC77A82F356C26F3571E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Detects encrypted or obfuscated .NET executables
-
Detects executables packed with Dotfuscator