General
- Target 2026-08-17_3d37df6dcf885f2fef3786c2c8cf9a2c_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_swisyn_wannacry
- Size 4.1MB
- Sample260817-tj2knsthmc
- SHA256 b1f0db976b38399b50e71ee69cffe693aa3a67bbf660d10b31d633a3450210fd
- MD5 3d37df6dcf885f2fef3786c2c8cf9a2c
- SHA1 4eb636a4fb95d3329e3a4e0a807e7e78f0151a76
- SHA512 f1a9b76c773b5f232363a28db306efc2e00bbd2035c5b82f92e24ca592a89639647d95f449d3612fbab449920579cce670f248e7381c1a6b6ffa2c2a3156891a
- SSDEEP 49152:tClcF76B4e1zOJJvgrR2qonFZiGetaDdj5XjeZUD/KNycqk/QSeDkJ++XQ56TC0A:Hp6xaJ2rAqoFZGt9UD/KNVqkoSeWI
- TLSH T1A9168D11BA01CA32D09151BE09A5BFA6475CAD346B394CC787E03EA945372D33EB7E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-17_3d37df6dcf885f2fef3786c2c8cf9a2c_amadey_coinminer_darkgate_elex_glassworm_hijackloader_lu.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-17_3d37df6dcf885f2fef3786c2c8cf9a2c_amadey_coinminer_darkgate_elex_glassworm_hijackloader_lu.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_3d37df6dcf885f2fef3786c2c8cf9a2c_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_swisyn_wannacry
- Size 4.1MB
- SHA256 b1f0db976b38399b50e71ee69cffe693aa3a67bbf660d10b31d633a3450210fd
- MD5 3d37df6dcf885f2fef3786c2c8cf9a2c
- SHA1 4eb636a4fb95d3329e3a4e0a807e7e78f0151a76
- SHA512 f1a9b76c773b5f232363a28db306efc2e00bbd2035c5b82f92e24ca592a89639647d95f449d3612fbab449920579cce670f248e7381c1a6b6ffa2c2a3156891a
- SSDEEP 49152:tClcF76B4e1zOJJvgrR2qonFZiGetaDdj5XjeZUD/KNycqk/QSeDkJ++XQ56TC0A:Hp6xaJ2rAqoFZGt9UD/KNVqkoSeWI
- TLSH T1A9168D11BA01CA32D09151BE09A5BFA6475CAD346B394CC787E03EA945372D33EB7E27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory