General
- Target 2026-08-06_9372905faa531c80cdd0e564c6b29bd4_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_pos_remcos_revil_smoke-loader
- Size 10.8MB
- Sample260806-vjaydszwaz
- SHA256 beb8f0519a693d1e02c2cb3c6393f86a20b7b0ff1f70ab63984364893311791d
- MD5 9372905faa531c80cdd0e564c6b29bd4
- SHA1 7a571063bdc94be5459d06cd8d1ef3acbb6b48d1
- SHA512 2d530b057ab2166e75c9e44183fc558df150f18ad09cad60d3f2ef88797cc7b370570dd66665995d52158b7c919d7b070768c7aa80a10fc3d503de26cf5c4afc
- SSDEEP 196608:7YEM9XgZJ1GSS3lbTwzd55AZRYCc9jQiSk1HmyOiiO4IPUkWJ:7Y59XgZJ1GSS3lbTwzd55cmmIokW
- TLSH T19AB67C03BA90CD22D4B9B33397631E2267B7B0186F17D3D765C497AA28127C2BD2535E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-06_9372905faa531c80cdd0e564c6b29bd4_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_9372905faa531c80cdd0e564c6b29bd4_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_9372905faa531c80cdd0e564c6b29bd4_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_pos_remcos_revil_smoke-loader
- Size 10.8MB
- SHA256 beb8f0519a693d1e02c2cb3c6393f86a20b7b0ff1f70ab63984364893311791d
- MD5 9372905faa531c80cdd0e564c6b29bd4
- SHA1 7a571063bdc94be5459d06cd8d1ef3acbb6b48d1
- SHA512 2d530b057ab2166e75c9e44183fc558df150f18ad09cad60d3f2ef88797cc7b370570dd66665995d52158b7c919d7b070768c7aa80a10fc3d503de26cf5c4afc
- SSDEEP 196608:7YEM9XgZJ1GSS3lbTwzd55AZRYCc9jQiSk1HmyOiiO4IPUkWJ:7Y59XgZJ1GSS3lbTwzd55cmmIokW
- TLSH T19AB67C03BA90CD22D4B9B33397631E2267B7B0186F17D3D765C497AA28127C2BD2535E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects encrypted or obfuscated .NET executables
-
Detects executables packed with Dotfuscator
-
Drops file in System32 directory