General
- Target 2026-08-17_8e251240e07c22184ef8d18528aaec1f_amadey_coinminer_darkgate_elex_emotet_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 15.8MB
- Sample260817-sx67msdn5z
- SHA256 6c94bb7d3dcfb1f2e7ff4b622f51c3ba611cf705558b48be5f2a141ffbc68ef5
- MD5 8e251240e07c22184ef8d18528aaec1f
- SHA1 9563da4cb3fd209843f56144682d78a69d354f7b
- SHA512 ed9b4add1d755946f8f709d342c71c71297868e1345df15e5d7ee8a6a379a0f417dc8f90ad08afa7686015889980e66ca18adf1641385814387d1f48deaef3c4
- SSDEEP 393216:mBC1wf0JwS8d1Wd0lQRCxzKDKzdOZY4PlF:Pwf0U9lqCKDKBoYI
- TLSH T156F6D023F901C071E5C201B296BE6F7569BD8A240B3498D3ABC49DF859315D37B3AB1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-17_8e251240e07c22184ef8d18528aaec1f_amadey_coinminer_darkgate_elex_emotet_glassworm_luca-ste.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_8e251240e07c22184ef8d18528aaec1f_amadey_coinminer_darkgate_elex_emotet_glassworm_luca-ste.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_8e251240e07c22184ef8d18528aaec1f_amadey_coinminer_darkgate_elex_emotet_glassworm_luca-stealer_njrat_remcos_smoke-loader
- Size 15.8MB
- SHA256 6c94bb7d3dcfb1f2e7ff4b622f51c3ba611cf705558b48be5f2a141ffbc68ef5
- MD5 8e251240e07c22184ef8d18528aaec1f
- SHA1 9563da4cb3fd209843f56144682d78a69d354f7b
- SHA512 ed9b4add1d755946f8f709d342c71c71297868e1345df15e5d7ee8a6a379a0f417dc8f90ad08afa7686015889980e66ca18adf1641385814387d1f48deaef3c4
- SSDEEP 393216:mBC1wf0JwS8d1Wd0lQRCxzKDKzdOZY4PlF:Pwf0U9lqCKDKBoYI
- TLSH T156F6D023F901C071E5C201B296BE6F7569BD8A240B3498D3ABC49DF859315D37B3AB1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Suspicious use of NtSetInformationThreadHideFromDebugger