General
- Target 2026-08-16_0f38d03f30b5fead1a38254fb0110a1f_coinminer_darkgate_darpapox_elex_hawkeye_luca-stealer_njrat_nymaim_remcos_rhadamanthys_wannacry
- Size 2.2MB
- Sample260816-xdwzsaveqa
- SHA256 dff67e5a3f37f43f0227b9c9f797b51b7c9b8fc15c695eb41de02108bef6bec7
- MD5 0f38d03f30b5fead1a38254fb0110a1f
- SHA1 9c4c6efb0967b6a038c5578bb83f07639f4d8a32
- SHA512 b518255742165d8117a6fc746fef028eea6b38faccd743cfb00c7fc0fa4d0117fded34047e53bbc7af516ca62829f3c45722e1c8788db27e5481767b52392b9e
- SSDEEP 49152:+MUqNiMaTdbTChxKCnFnQXBbrtgb/iQvu0UHOM:RRZaTd6hxvWbrtUTrUHOM
- TLSH T1CCA5EF116740CC71F36BC1314BD4AE79757B69602B33CD9BAB8809381BF0D9BE7A1652
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-16_0f38d03f30b5fead1a38254fb0110a1f_coinminer_darkgate_darpapox_elex_hawkeye_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_0f38d03f30b5fead1a38254fb0110a1f_coinminer_darkgate_darpapox_elex_hawkeye_luca-stealer_nj.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_0f38d03f30b5fead1a38254fb0110a1f_coinminer_darkgate_darpapox_elex_hawkeye_luca-stealer_njrat_nymaim_remcos_rhadamanthys_wannacry
- Size 2.2MB
- SHA256 dff67e5a3f37f43f0227b9c9f797b51b7c9b8fc15c695eb41de02108bef6bec7
- MD5 0f38d03f30b5fead1a38254fb0110a1f
- SHA1 9c4c6efb0967b6a038c5578bb83f07639f4d8a32
- SHA512 b518255742165d8117a6fc746fef028eea6b38faccd743cfb00c7fc0fa4d0117fded34047e53bbc7af516ca62829f3c45722e1c8788db27e5481767b52392b9e
- SSDEEP 49152:+MUqNiMaTdbTChxKCnFnQXBbrtgb/iQvu0UHOM:RRZaTd6hxvWbrtUTrUHOM
- TLSH T1CCA5EF116740CC71F36BC1314BD4AE79757B69602B33CD9BAB8809381BF0D9BE7A1652
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory