General
- Target 2026-08-19_3324dd6aba40af1549fe53df4d7dc0ca_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 4.0MB
- Sample260819-kh45qs1ang
- SHA256 fdb9f42044abf66aa433d5c4ac2faf4b7abf17deeba6c7aa28da1db4a54c5533
- MD5 3324dd6aba40af1549fe53df4d7dc0ca
- SHA1 f1eae8ba6e8648a7afc17f7e1fcde056567f1760
- SHA512 b8b8d17163ef58edf0f025202fea33a6b7f70b64050896155be13833f48e7a44be8f3f63749ce1da81af0b9914a1567affca07e8e41b26691d71ca1a63d98401
- SSDEEP 98304:ASc7KTNzaovdiuxTp8/AjVLrfdBJs25+XJJnZfYbIWK+De:A50zaoH8YZLrfdBJOJJA1De
- TLSH T14B16C012FB42C172E49201B151BADBBB983DAD346734C6C3D7D03E7699302E17A3A796
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-19_3324dd6aba40af1549fe53df4d7dc0ca_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_3324dd6aba40af1549fe53df4d7dc0ca_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 4.0MB
- SHA256 fdb9f42044abf66aa433d5c4ac2faf4b7abf17deeba6c7aa28da1db4a54c5533
- MD5 3324dd6aba40af1549fe53df4d7dc0ca
- SHA1 f1eae8ba6e8648a7afc17f7e1fcde056567f1760
- SHA512 b8b8d17163ef58edf0f025202fea33a6b7f70b64050896155be13833f48e7a44be8f3f63749ce1da81af0b9914a1567affca07e8e41b26691d71ca1a63d98401
- SSDEEP 98304:ASc7KTNzaovdiuxTp8/AjVLrfdBJs25+XJJnZfYbIWK+De:A50zaoH8YZLrfdBJOJJA1De
- TLSH T14B16C012FB42C172E49201B151BADBBB983DAD346734C6C3D7D03E7699302E17A3A796
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1