General
- Target 2026-08-07_35eecc3aa5c9778f211980148ea18438_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 1.1MB
- Sample260807-kf9x7s1arb
- SHA256 4f9249bc510f9a247ce0d658e1bdb15781a96528be65d698b686a69c3ffdb8e1
- MD5 35eecc3aa5c9778f211980148ea18438
- SHA1 1fd74b03534728173a5742c7c59d8aea01776bec
- SHA512 78cb899667b9fdec288efc741ecb80655447d1b849c5ca28e2146c0f21abe35497d15eb66afa6c3bb9aef2473f0293277a0740cd47e12973c4697558e13d13b0
- SSDEEP 24576:o1BVOMFLbaFbFgqiahAgTVyJV1ytlrzUPJyDYrJ+MixJRnFi:IOMFLbaFbFgqiGNoJVil8xtJ+JLtF
- TLSH T14D45AD2676D2803AE6B307314D39E29416BAB9B15E32CB5F67C8121E1FB06519F31B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_35eecc3aa5c9778f211980148ea18438_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_35eecc3aa5c9778f211980148ea18438_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 1.1MB
- SHA256 4f9249bc510f9a247ce0d658e1bdb15781a96528be65d698b686a69c3ffdb8e1
- MD5 35eecc3aa5c9778f211980148ea18438
- SHA1 1fd74b03534728173a5742c7c59d8aea01776bec
- SHA512 78cb899667b9fdec288efc741ecb80655447d1b849c5ca28e2146c0f21abe35497d15eb66afa6c3bb9aef2473f0293277a0740cd47e12973c4697558e13d13b0
- SSDEEP 24576:o1BVOMFLbaFbFgqiahAgTVyJV1ytlrzUPJyDYrJ+MixJRnFi:IOMFLbaFbFgqiGNoJVil8xtJ+JLtF
- TLSH T14D45AD2676D2803AE6B307314D39E29416BAB9B15E32CB5F67C8121E1FB06519F31B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE