General
- Target 2026-08-06_389147e1b8043128fffa90076a22b58a_amadey_coinminer_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_rhadamanthys_stop_wannacry
- Size 6.2MB
- Sample260806-3ab34acg56
- SHA256 e9bb995349160a67bb23f07926a780205c0d57a28dc0e08dfd4be92c081750a3
- MD5 389147e1b8043128fffa90076a22b58a
- SHA1 c166ee3c39981cd95626070d52a820f6c3bbe516
- SHA512 86f504e9ae73084fc5b3b6fd687b6f80e4f2939d939f88c898e60e6eb4e81dcd57c2a915a54b4a76e3b65054c562f561880ab8478b394e5309af90455e3baf98
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbAjk8x1T4sE21lu72I3t4lY6+/Y4O8b8ITDnlmg4vT3S9E:7fkZcAjkolXXu/3NETIOSA9
- TLSH T1E566381262D8C1E7E069217ACC657BB852642D39DB62CECB7D04BE1A79317C2853372F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-06_389147e1b8043128fffa90076a22b58a_amadey_coinminer_elex_glassworm_hijackloader_luca-steale.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_389147e1b8043128fffa90076a22b58a_amadey_coinminer_elex_glassworm_hijackloader_luca-steale.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_389147e1b8043128fffa90076a22b58a_amadey_coinminer_elex_glassworm_hijackloader_luca-stealer_njrat_remcos_rhadamanthys_stop_wannacry
- Size 6.2MB
- SHA256 e9bb995349160a67bb23f07926a780205c0d57a28dc0e08dfd4be92c081750a3
- MD5 389147e1b8043128fffa90076a22b58a
- SHA1 c166ee3c39981cd95626070d52a820f6c3bbe516
- SHA512 86f504e9ae73084fc5b3b6fd687b6f80e4f2939d939f88c898e60e6eb4e81dcd57c2a915a54b4a76e3b65054c562f561880ab8478b394e5309af90455e3baf98
- SSDEEP 49152:Dx4fD2eW4SkZP4sz9MbAjk8x1T4sE21lu72I3t4lY6+/Y4O8b8ITDnlmg4vT3S9E:7fkZcAjkolXXu/3NETIOSA9
- TLSH T1E566381262D8C1E7E069217ACC657BB852642D39DB62CECB7D04BE1A79317C2853372F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Drops file in System32 directory