General
- Target 2026-08-05_de7cfbbfa0f0438275a772d721897631_amadey_coinminer_elex_luca-stealer_lynx_njrat_revil
- Size 14.2MB
- Sample260805-c8lr3scd28
- SHA256 fa87fc5bc6d1a81db3506e25a7ad33aeef8f10b3b7c82733b77d489f328adf48
- MD5 de7cfbbfa0f0438275a772d721897631
- SHA1 931521bd3c5ab867081fd918c6e203775c60823d
- SHA512 c00b3aa6cc8883ab96942e2feb2c878ed30a22da6a3b500dc26c29b021f43f5baee72786bf8a68fb1c1659e5fd10b7a40e234c9a2301a43a032ccd0a11ae00d7
- SSDEEP 393216:r2PD7BafXo9XKP2cDjQ9XM26L3YTbQ9p:g5afXo4PV098R76M9p
- TLSH T144E633167ED1D4B1E13528BA0FFE98B006AEFC11056260A7FB392F56B9533E5ED21321
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-05_de7cfbbfa0f0438275a772d721897631_amadey_coinminer_elex_luca-stealer_lynx_njrat_revil.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_de7cfbbfa0f0438275a772d721897631_amadey_coinminer_elex_luca-stealer_lynx_njrat_revil
- Size 14.2MB
- SHA256 fa87fc5bc6d1a81db3506e25a7ad33aeef8f10b3b7c82733b77d489f328adf48
- MD5 de7cfbbfa0f0438275a772d721897631
- SHA1 931521bd3c5ab867081fd918c6e203775c60823d
- SHA512 c00b3aa6cc8883ab96942e2feb2c878ed30a22da6a3b500dc26c29b021f43f5baee72786bf8a68fb1c1659e5fd10b7a40e234c9a2301a43a032ccd0a11ae00d7
- SSDEEP 393216:r2PD7BafXo9XKP2cDjQ9XM26L3YTbQ9p:g5afXo4PV098R76M9p
- TLSH T144E633167ED1D4B1E13528BA0FFE98B006AEFC11056260A7FB392F56B9533E5ED21321
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Loads dropped DLL