General
- Target 2026-08-15_18958732bfbaac46e2c2c78090a57d33_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 1.1MB
- Sample260815-eynj2adg98
- SHA256 3533261dafcc22a0ceca070329e2cacce0dba3f068054edc695613f09ec926c2
- MD5 18958732bfbaac46e2c2c78090a57d33
- SHA1 72d0bd23e6085f86c9972572afa9556d5e6b74d0
- SHA512 082819a88ef96944b2801a5fb145e60452a9bd8ece26e0300ac63fa80c831ab4349865119c1376147abc8f2ec453e6dc569ec456dfd13a339943f514f719844d
- SSDEEP 24576:xHwzztHK5SxfVCJSVkfmvEHbI21MZqpJCDYT3ER:iztHK5SxfVCJmQRHB1FL
- TLSH T108359D2276D2813AE6B307315D39E29512BEB9715E32CB5F67C8021E1F706519F22B73
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-15_18958732bfbaac46e2c2c78090a57d33_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-15_18958732bfbaac46e2c2c78090a57d33_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 1.1MB
- SHA256 3533261dafcc22a0ceca070329e2cacce0dba3f068054edc695613f09ec926c2
- MD5 18958732bfbaac46e2c2c78090a57d33
- SHA1 72d0bd23e6085f86c9972572afa9556d5e6b74d0
- SHA512 082819a88ef96944b2801a5fb145e60452a9bd8ece26e0300ac63fa80c831ab4349865119c1376147abc8f2ec453e6dc569ec456dfd13a339943f514f719844d
- SSDEEP 24576:xHwzztHK5SxfVCJSVkfmvEHbI21MZqpJCDYT3ER:iztHK5SxfVCJmQRHB1FL
- TLSH T108359D2276D2813AE6B307315D39E29512BEB9715E32CB5F67C8021E1F706519F22B73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE