c2d99ff33ea72c9a2a1b2e3c750a50dd270f1de65a2b8fc8d375993a4231350d | Triage™

Login
Reports

Overview

overview

6

Static

static

3

2026-08-08...me.exe

windows10-2004-x64

6

2026-08-08...me.exe

windows11-ltsc_2024-x64

6

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-08_7ad563776386815420401ab663382779_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_revil
Size 38.5MB
Sample260808-dt7xfabd84
SHA256 c2d99ff33ea72c9a2a1b2e3c750a50dd270f1de65a2b8fc8d375993a4231350d
MD5 7ad563776386815420401ab663382779
SHA1 f612ddff627aab01fdeb9c0a7f0e3716df2762a3
SHA512 d3c9278ba202ef2ef3e614a59e08700e2d7cb2a77707301df14293308b913e59ddc974e0333bbc65a52b960a655d78fb3f5e0cf0fe75d6eef20f5eb9af2419b9
SSDEEP 393216:8rsJh+99ZHm1vMLrszuggLy10XAV0kf+mjHSCN+Zw2z+VaqwLeC:3uK1L00Xy9Z17yC
TLSH
T1A19729326A42D17AFD5322F2CD7D9A7ED31B6C92074511C3F28C3A6D6BB6ED22931406
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

2026-08-08_7ad563776386815420401ab663382779_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

17 signatures

150 seconds

defense_evasion discovery persistence trojan

Behavioral task

behavioral2

Sample

2026-08-08_7ad563776386815420401ab663382779_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_me.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

16 signatures

150 seconds

defense_evasion discovery persistence trojan

Malware Config

Targets

- Target
  2026-08-08_7ad563776386815420401ab663382779_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_revil
- Size 38.5MB
- SHA256 c2d99ff33ea72c9a2a1b2e3c750a50dd270f1de65a2b8fc8d375993a4231350d
- MD5 7ad563776386815420401ab663382779
- SHA1 f612ddff627aab01fdeb9c0a7f0e3716df2762a3
- SHA512 d3c9278ba202ef2ef3e614a59e08700e2d7cb2a77707301df14293308b913e59ddc974e0333bbc65a52b960a655d78fb3f5e0cf0fe75d6eef20f5eb9af2419b9
- SSDEEP 393216:8rsJh+99ZHm1vMLrszuggLy10XAV0kf+mjHSCN+Zw2z+VaqwLeC:3uK1L00Xy9Z17yC
- TLSH
  T1A19729326A42D17AFD5322F2CD7D9A7ED31B6C92074511C3F28C3A6D6BB6ED22931406
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery persistence trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistencetrojan

behavioral2

defense_evasiondiscoverypersistencetrojan

© 2018-2026

Terms | Privacy