Analysis
- max time kernel
149s - max time network
135s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/08/2026, 03:15
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_09f5f8f362f004b850207a1623ee86a8_amadey_coinminer_elex_glassworm_luca-stealer_njrat_rhada.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_09f5f8f362f004b850207a1623ee86a8_amadey_coinminer_elex_glassworm_luca-stealer_njrat_rhada.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-20_09f5f8f362f004b850207a1623ee86a8_amadey_coinminer_elex_glassworm_luca-stealer_njrat_rhada.exe
- Size 30.8MB
- Sample260820-dr5pasbb77
- SHA256 cb0e6aead591e5ed4483e4714021b7cf576ab5734ef40308b3e77d80f8be1013
- MD5 09f5f8f362f004b850207a1623ee86a8
- SHA1 d6de949cf1f937c9b53709926fd666afefdaf69a
- SHA512 c8b4641644274f9f7b13da3d4410f39299afdc7fa9e58e813e9f347f40b30254ddb5113be1536ab67827128a49297193b45e6ad07e1752598d72f719da745555
- SSDEEP 393216:ZA7525VA7525xA7525cBU6flbPk5HPhJCFMgNA7525VA7525xA7525cBU6fSA759:6j3LfkhXj3LfXj3Lfkhg
- TLSH T1AD677C02B68AA8F5D97615304777E3F70B38FC215420DE4FF384BB29AE35682B519726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-20_09f5f8f362f004b850207a1623ee86a8_amadey_coinminer_elex_glassworm_luca-stealer_njrat_rhada.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-20_09f5f8f362f004b850207a1623ee86a8_amadey_coinminer_elex_glassworm_luca-stealer_njrat_rhada.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-20_09f5f8f362f004b850207a1623ee86a8_amadey_coinminer_elex_glassworm_luca-stealer_njrat_rhada.exe"1⤵
- System Location Discovery: System Language Discovery
PID:4248