Analysis
- max time kernel
149s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
20/08/2026, 19:08
General
- Target 2026-08-20_48a82630e62c780f713f2ec8148774ab_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_stop.exe
- Size 8.2MB
- Sample260820-xtbnsafd35
- SHA256 b4a84f08635b73c9443ce43f6dd0a8b9ca9f84fd14c4f0b577f8ad623700571d
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
- Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-20_48a82630e62c780f713f2ec8148774ab_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_stop.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-20_48a82630e62c780f713f2ec8148774ab_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_smoke-loader_stop.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
Flash10i.ocx
settings.sxx
memory/3404-7-0x0000000003230000-0x0000000003231000-memory.dmp
memory/3404-57-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-56-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-58-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-59-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-62-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-61-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-74-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-75-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-65-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-64-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-76-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-78-0x0000000003230000-0x0000000003231000-memory.dmp
memory/3404-85-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-92-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-152-0x0000000008450000-0x0000000008650000-memory.dmp
memory/3404-473-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-645-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-646-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-671-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-721-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-743-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-761-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-797-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-862-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-869-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-870-0x0000000008450000-0x0000000008650000-memory.dmp
memory/3404-873-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-868-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-867-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-787-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-720-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-670-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-625-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-472-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-431-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-151-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-150-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-149-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-148-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-147-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-146-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-145-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-144-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-143-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-142-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-141-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-140-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-139-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-138-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-137-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-136-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-135-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-133-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-170-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-169-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-124-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-122-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-121-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-119-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-120-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-116-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-115-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-114-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-113-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-112-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-111-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-110-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-102-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-101-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-1767-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-99-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-98-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-97-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-93-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-91-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-134-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-90-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-130-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-131-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-129-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-128-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-126-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-123-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-117-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-105-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-108-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-109-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-107-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-106-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-104-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-100-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-94-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-95-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-83-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-82-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-89-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-103-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-87-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-79-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-2117-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-2851-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-2852-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-2853-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-2854-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-2855-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-2856-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-2857-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-2858-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-2859-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-2860-0x00000000076F0000-0x00000000078F0000-memory.dmp
memory/3404-2861-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-2862-0x0000000008450000-0x0000000008650000-memory.dmp
memory/3404-2863-0x0000000008250000-0x0000000008450000-memory.dmp
memory/3404-2864-0x00000000076F0000-0x00000000078F0000-memory.dmp