General
- Target 2026-08-09_be9f55c8049aaea883b1bba32ee9d846_amadey_coinminer_darkgate_elex_glassworm_hellokitty_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop
- Size 18.2MB
- Sample260809-g9q6eawsdw
- SHA256 7742be788dc89708f55e7d89275bc62bbb0d013fd4ffeb19307114498ade9959
- MD5 be9f55c8049aaea883b1bba32ee9d846
- SHA1 6311ce1ece9e3f6d10a374a58bc97d3eee1bab0a
- SHA512 7ae23c00013e4f7850a2a38d23b880089010b510133238f26c7e9992c7faf057730c1a7f91bb0b351215d9e60d913d484a992ba997ae5b80531d72757c7a1619
- SSDEEP 393216:BB2SlLdNkZl05YflfxgkTVfdBL/tEJ1+lFj99e2xXX+QU9DrFkpBg:FLPkZl05Yt+kTVTL/xlFVaP1
- TLSH T12E17AE23E64180B1C14221798C3AEEAD517DBE2547341AC713947D1BAA72BC3BA3DB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_be9f55c8049aaea883b1bba32ee9d846_amadey_coinminer_darkgate_elex_glassworm_hellokitty_luca.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_be9f55c8049aaea883b1bba32ee9d846_amadey_coinminer_darkgate_elex_glassworm_hellokitty_luca.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_be9f55c8049aaea883b1bba32ee9d846_amadey_coinminer_darkgate_elex_glassworm_hellokitty_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stop
- Size 18.2MB
- SHA256 7742be788dc89708f55e7d89275bc62bbb0d013fd4ffeb19307114498ade9959
- MD5 be9f55c8049aaea883b1bba32ee9d846
- SHA1 6311ce1ece9e3f6d10a374a58bc97d3eee1bab0a
- SHA512 7ae23c00013e4f7850a2a38d23b880089010b510133238f26c7e9992c7faf057730c1a7f91bb0b351215d9e60d913d484a992ba997ae5b80531d72757c7a1619
- SSDEEP 393216:BB2SlLdNkZl05YflfxgkTVfdBL/tEJ1+lFj99e2xXX+QU9DrFkpBg:FLPkZl05Yt+kTVTL/xlFVaP1
- TLSH T12E17AE23E64180B1C14221798C3AEEAD517DBE2547341AC713947D1BAA72BC3BA3DB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory