Analysis
- max time kernel
148s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/08/2026, 15:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-15_157e12d7a87ccfdca186248d9fc2c958_amadey_coinminer_elex_glassworm_luca-stealer_njrat_qakbot_revil_smoke-loader.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-15_157e12d7a87ccfdca186248d9fc2c958_amadey_coinminer_elex_glassworm_luca-stealer_njrat_qakbot_revil_smoke-loader.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-15_157e12d7a87ccfdca186248d9fc2c958_amadey_coinminer_elex_glassworm_luca-stealer_njrat_qakbot_revil_smoke-loader.exe
- Size 3.4MB
- Sample260815-tek25agf68
- SHA256 864dce17d177213948eef60d77f308dd62dfc177f68ecd17601de71f82bf2835
- MD5 157e12d7a87ccfdca186248d9fc2c958
- SHA1 f7fb3ea8b955fb4e63faeae960994a0b4e1eaeac
- SHA512 2a6e2811ff4fe0fa61287e6b0ce06a9ab38a178dc2f07dce8928a45f4847103f4b34897581441598bda0a103aa6629b25d411c751daf020e1797a2286f89edd8
- SSDEEP 98304:aWvZbSG1Fh00KLln1VTp2t/LWmsY3kZ6PmNYtH:TZSGh00KLln1Vl2FxsY04PmN
- TLSH T194F5CF12FA4249B9EAD31174D2EF537A4A396F20033584C797D03FA998325D2BB3E395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-15_157e12d7a87ccfdca186248d9fc2c958_amadey_coinminer_elex_glassworm_luca-stealer_njrat_qakbot_revil_smoke-loader.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-15_157e12d7a87ccfdca186248d9fc2c958_amadey_coinminer_elex_glassworm_luca-stealer_njrat_qakbot_revil_smoke-loader.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-15_157e12d7a87ccfdca186248d9fc2c958_amadey_coinminer_elex_glassworm_luca-stealer_njrat_qakbot_revil_smoke-loader.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4176