Analysis
- max time kernel
148s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 11:11
Static task
static1
Behavioral task
behavioral1
Sample
2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe
- Size 2.4MB
- Sample260809-nandssdr7w
- SHA256 8c9b7abd1eb096221001881255c3268aae71dc6ec18a22281f1667b359cf2a70
- MD5 33cac1908709ea1e2f06437b058d6035
- SHA1 a4249827d5fc47d66d08c532811a7eda7f881850
- SHA512 ab615675570cdfc8fd7e34f2c151013bad035ca815815b0f0d41fceda8010a467403db115b28da4217baa1a349864c1effd2aabd15bca03bb25cf595a7568cc8
- SSDEEP 49152:JWETn/DO7vpDY2gyz1ElNPJD+8yrnLzDzz:JWETnrOzhN51g/D+8O
- TLSH T11FB5AD52FB82CEB1F4920135A0A78B7F4E795E2047E4C0D3879E2C6599306D1B6FB3A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe - Suspicious behavior: EnumeratesProcesses 20 IoCs
pid Process 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe 4348 2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-09_33cac1908709ea1e2f06437b058d6035_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:4348