General
- Target 2026-08-07_5e553a64cee5a4e31a57d6ab1d9b8d82_amadey_coinminer_darkgate_elex_emotet_glassworm_luca-stealer_njrat_remcos_stealc_stop
- Size 13.5MB
- Sample260808-bnyqgaxcpe
- SHA256 d2c65f7f3f54cdf438711cd6b361f28e50e9cb5a274a6e1f330b9a401545ca51
- MD5 5e553a64cee5a4e31a57d6ab1d9b8d82
- SHA1 0ddf8d9076ff2a8ae4ed49e98c77654897416064
- SHA512 8bb992a52c512a6cc60e14ae8f969af0a9cad00d8ea4509b741649e7f493ee25db90ae567a2aae9909b3345f0323038a47e745da9c6d083791ea726a01000753
- SSDEEP 196608:eiIkqAgyc2R8qp2lB33yxd6ekBDjmBInu+6Y+d8T1QrLpe1U:dIkqAs2R8iugny3mSmROTur
- TLSH T110E6E0917F85F0EBD00A1372E392DE179A2C43A901B54197FA4AB93FEE53D85128ED1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-07_5e553a64cee5a4e31a57d6ab1d9b8d82_amadey_coinminer_darkgate_elex_emotet_glassworm_luca-ste.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_5e553a64cee5a4e31a57d6ab1d9b8d82_amadey_coinminer_darkgate_elex_emotet_glassworm_luca-stealer_njrat_remcos_stealc_stop
- Size 13.5MB
- SHA256 d2c65f7f3f54cdf438711cd6b361f28e50e9cb5a274a6e1f330b9a401545ca51
- MD5 5e553a64cee5a4e31a57d6ab1d9b8d82
- SHA1 0ddf8d9076ff2a8ae4ed49e98c77654897416064
- SHA512 8bb992a52c512a6cc60e14ae8f969af0a9cad00d8ea4509b741649e7f493ee25db90ae567a2aae9909b3345f0323038a47e745da9c6d083791ea726a01000753
- SSDEEP 196608:eiIkqAgyc2R8qp2lB33yxd6ekBDjmBInu+6Y+d8T1QrLpe1U:dIkqAs2R8iugny3mSmROTur
- TLSH T110E6E0917F85F0EBD00A1372E392DE179A2C43A901B54197FA4AB93FEE53D85128ED1C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with Themida
-
Detects executables referencing virtualization MAC addresses
-
UPX dump on OEP (original entry point)