Analysis
- max time kernel
148s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
20/08/2026, 19:08
General
- Target 2026-08-20_48a82630e62c780f713f2ec8148774ab_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_stop.exe
- Size 8.2MB
- Sample260820-xtbnsafd35
- SHA256 b4a84f08635b73c9443ce43f6dd0a8b9ca9f84fd14c4f0b577f8ad623700571d
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-20_48a82630e62c780f713f2ec8148774ab_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-20_48a82630e62c780f713f2ec8148774ab_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_stop.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
Flash10i.ocx
settings.sxx
memory/2252-7-0x0000000002C70000-0x0000000002C71000-memory.dmp
memory/2252-56-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-57-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-58-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-59-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-60-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-61-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-62-0x0000000002C70000-0x0000000002C71000-memory.dmp
memory/2252-63-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-64-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-65-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-67-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-68-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-70-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-71-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-79-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-78-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-121-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-169-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-173-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-174-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-272-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-356-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-354-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-353-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-352-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-351-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-350-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-349-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-403-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-477-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-946-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-991-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-1065-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-1069-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-1068-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-1067-0x00000000069E0000-0x0000000006BE0000-memory.dmp
memory/2252-1066-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-1064-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-1016-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-1015-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-990-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-958-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-927-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-926-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-869-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-832-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-831-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-621-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-476-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-402-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-348-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-347-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-346-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-345-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-344-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-343-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-314-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-256-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-254-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-226-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-221-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-193-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-183-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-182-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-181-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-180-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-179-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-178-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-177-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-176-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-175-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-184-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-172-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-170-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-168-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-167-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-166-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-165-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-164-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-160-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-159-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-158-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-152-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-151-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-150-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-149-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-145-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-144-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-143-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-142-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-128-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-126-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-123-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-122-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-120-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-113-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-110-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-105-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-161-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-90-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-88-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-87-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-84-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-106-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-82-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-2857-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-2858-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-2859-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-2860-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-2861-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-2862-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-2863-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-2864-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-2865-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-2866-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-2867-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-2868-0x00000000069E0000-0x0000000006BE0000-memory.dmp
memory/2252-2869-0x00000000060A0000-0x00000000062A0000-memory.dmp
memory/2252-2871-0x0000000006DE0000-0x0000000006FE0000-memory.dmp
memory/2252-2870-0x0000000006DE0000-0x0000000006FE0000-memory.dmp