General
- Target 2026-08-16_5d029e851a96ad8c2bb7995a37523c26_amadey_coinminer_elex_glassworm_hijackloader_luca-stealer_njrat_revil_smoke-loader
- Size 9.6MB
- Sample260816-rpr73szyet
- SHA256 bec3b4e185ce0a2bcc54a3ea413d9f393e18c61ce14a3a9f39a5b88350736044
- MD5 5d029e851a96ad8c2bb7995a37523c26
- SHA1 1ab871a632e0aaa3278bf98ad75e2cc7a705021b
- SHA512 1163d8337ed2ac05cdfe1f7b7fc9f13e425093a13b3b33c9e5cf07f1b5e257ddc5e12faf5dc300d449f069343a25ff6951a0db79655350c157278f6b66c291c7
- SSDEEP 98304:VDYQlcQjckkpYuwxVVmwMKGjLQWqpk+NYGitd0x:VfcCRYwKGpk+YGitix
- TLSH T154A6D012FB42C832D6CE42B951BF9BBF4A3CCA24472544D7A7D41CA4D9602D3263E76E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_5d029e851a96ad8c2bb7995a37523c26_amadey_coinminer_elex_glassworm_hijackloader_luca-steale.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_5d029e851a96ad8c2bb7995a37523c26_amadey_coinminer_elex_glassworm_hijackloader_luca-steale.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_5d029e851a96ad8c2bb7995a37523c26_amadey_coinminer_elex_glassworm_hijackloader_luca-stealer_njrat_revil_smoke-loader
- Size 9.6MB
- SHA256 bec3b4e185ce0a2bcc54a3ea413d9f393e18c61ce14a3a9f39a5b88350736044
- MD5 5d029e851a96ad8c2bb7995a37523c26
- SHA1 1ab871a632e0aaa3278bf98ad75e2cc7a705021b
- SHA512 1163d8337ed2ac05cdfe1f7b7fc9f13e425093a13b3b33c9e5cf07f1b5e257ddc5e12faf5dc300d449f069343a25ff6951a0db79655350c157278f6b66c291c7
- SSDEEP 98304:VDYQlcQjckkpYuwxVVmwMKGjLQWqpk+NYGitd0x:VfcCRYwKGpk+YGitix
- TLSH T154A6D012FB42C832D6CE42B951BF9BBF4A3CCA24472544D7A7D41CA4D9602D3263E76E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Manipulates Digital Signatures
Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.