General
- Target 2026-08-17_f50d4c23efd70470e2834675c69d71ec_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_swisyn_wannacry
- Size 4.5MB
- Sample260817-r4lnvasdpd
- SHA256 5be420f6ef839e1e0410f7683fe1d55821aa7ef3c4b0404c1102e415a8a62ed6
- MD5 f50d4c23efd70470e2834675c69d71ec
- SHA1 d44abbe932196db8cd6af92390bf028fbbc401f7
- SHA512 a65e31fbe1d1d5bb8f98a3a3c232f580102d40b73a1dc9efd95e467eb0babf3c8de34489ee97ddbf6597415a7942a472ce8de91a4fdff5293e66aefdc0951adf
- SSDEEP 98304:KshJ/H4z/MP9EKjnV5F6Z997Bqt/VvU3ri3vYwjK:Ku/IYnV5Fg9ivhfYUK
- TLSH T1B2269E217545CD7AD592017509A87BB54AAFAD38ABB80CCB53C01ED98D262C37D33F2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_f50d4c23efd70470e2834675c69d71ec_amadey_coinminer_darkgate_elex_glassworm_hijackloader_lu.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_f50d4c23efd70470e2834675c69d71ec_amadey_coinminer_darkgate_elex_glassworm_hijackloader_lu.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_f50d4c23efd70470e2834675c69d71ec_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_swisyn_wannacry
- Size 4.5MB
- SHA256 5be420f6ef839e1e0410f7683fe1d55821aa7ef3c4b0404c1102e415a8a62ed6
- MD5 f50d4c23efd70470e2834675c69d71ec
- SHA1 d44abbe932196db8cd6af92390bf028fbbc401f7
- SHA512 a65e31fbe1d1d5bb8f98a3a3c232f580102d40b73a1dc9efd95e467eb0babf3c8de34489ee97ddbf6597415a7942a472ce8de91a4fdff5293e66aefdc0951adf
- SSDEEP 98304:KshJ/H4z/MP9EKjnV5F6Z997Bqt/VvU3ri3vYwjK:Ku/IYnV5Fg9ivhfYUK
- TLSH T1B2269E217545CD7AD592017509A87BB54AAFAD38ABB80CCB53C01ED98D262C37D33F2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory