General
- Target 2026-08-10_1b579b4c07c36d6be8a9f1efd420b091_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_njrat_remcos_revil
- Size 4.5MB
- Sample260810-df8xkstyey
- SHA256 0e2722391b552638a481fe984fbbb73f1c116683ce83b4153657a6f35e0865b3
- MD5 1b579b4c07c36d6be8a9f1efd420b091
- SHA1 4a1d7b724e8eec91b9177cd7ad4786869445ddb4
- SHA512 9741485a612b4dae35ad2d95d8640bbfaa59f2079bba3d678ef6f21036b59d08cee786d2dcb0e3beabdf4bbd329348b8b4c9eb0c777a611d2200e4f29035966c
- SSDEEP 98304:/4loQIXvjbNKvlxALrIY9Uq8Kv4pTa2yQR:/rcY9L8KvR27
- TLSH T19B26BF017E428472DB51027579F6A7B6DDBDBE1C0B2085C3AFAB36AD5E302D026F5386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_1b579b4c07c36d6be8a9f1efd420b091_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_1b579b4c07c36d6be8a9f1efd420b091_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_1b579b4c07c36d6be8a9f1efd420b091_coinminer_darkgate_elex_glassworm_luca-stealer_magniber_medusalocker_njrat_remcos_revil
- Size 4.5MB
- SHA256 0e2722391b552638a481fe984fbbb73f1c116683ce83b4153657a6f35e0865b3
- MD5 1b579b4c07c36d6be8a9f1efd420b091
- SHA1 4a1d7b724e8eec91b9177cd7ad4786869445ddb4
- SHA512 9741485a612b4dae35ad2d95d8640bbfaa59f2079bba3d678ef6f21036b59d08cee786d2dcb0e3beabdf4bbd329348b8b4c9eb0c777a611d2200e4f29035966c
- SSDEEP 98304:/4loQIXvjbNKvlxALrIY9Uq8Kv4pTa2yQR:/rcY9L8KvR27
- TLSH T19B26BF017E428472DB51027579F6A7B6DDBDBE1C0B2085C3AFAB36AD5E302D026F5386
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1