General
- Target 2026-08-17_e697c50ff7a9c94ab7dfa745cc119a9c_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_swisyn_wannacry
- Size 12.7MB
- Sample260817-r8ar5ssepc
- SHA256 1f602ef367a42bb0a4c267f317bda56b11c6641c9c178513c05888d2c6531ebf
- MD5 e697c50ff7a9c94ab7dfa745cc119a9c
- SHA1 09135007bf29bd579c33fe6bc2f2a839bd7ab2f9
- SHA512 afde437be338157045226f07f1dfe484e950e78a7c50828dacfeefdabcc2434436f6310677b969fec3178701959d849aa5e51d3c176a05910748acfdd251372d
- SSDEEP 196608:Fv2EhONgkWlOE0J3Z9766z2bL0fIshL5BaZqpTmQ:Fv29HyT09Z976JSIshLmopTmQ
- TLSH T153D65B653814CB63ECF813B5AAF96A6CD28D4D384F6914E7D6D12D9A1039ED32832F31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_e697c50ff7a9c94ab7dfa745cc119a9c_amadey_coinminer_darkgate_elex_glassworm_hijackloader_lu.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_e697c50ff7a9c94ab7dfa745cc119a9c_amadey_coinminer_darkgate_elex_glassworm_hijackloader_lu.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_e697c50ff7a9c94ab7dfa745cc119a9c_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_swisyn_wannacry
- Size 12.7MB
- SHA256 1f602ef367a42bb0a4c267f317bda56b11c6641c9c178513c05888d2c6531ebf
- MD5 e697c50ff7a9c94ab7dfa745cc119a9c
- SHA1 09135007bf29bd579c33fe6bc2f2a839bd7ab2f9
- SHA512 afde437be338157045226f07f1dfe484e950e78a7c50828dacfeefdabcc2434436f6310677b969fec3178701959d849aa5e51d3c176a05910748acfdd251372d
- SSDEEP 196608:Fv2EhONgkWlOE0J3Z9766z2bL0fIshL5BaZqpTmQ:Fv29HyT09Z976JSIshLmopTmQ
- TLSH T153D65B653814CB63ECF813B5AAF96A6CD28D4D384F6914E7D6D12D9A1039ED32832F31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory