General
- Target 2026-08-21_fede865874ea317c58e007d8f14e44d0_amadey_coinminer_darkgate_elex_luca-stealer_njrat_smoke-loader_wannacry
- Size 1.7MB
- Sample260821-3p9mxatvbv
- SHA256 569a6d73d7b5048603bb6d93b83c3498233f3a5bec2e56713e72b42a15e4ec0c
- MD5 fede865874ea317c58e007d8f14e44d0
- SHA1 c7107998167ddee369d51210f1cbc1a3991895d7
- SHA512 8de973b1c7d6f4a0a4a0c1db67883a93e59b96d671d2a87e7ea9e0b0fb408c77be3ae4971e4f9835247cb6df79c28a7984f835f43a5a1e331f3ca8616c772c5c
- SSDEEP 49152:/7rotv2EZ/WC22VOorlgoJeVPKQnLafr06HLP+c1h65ni/S/buO+Y:fotv2y22n06HLP+cqUUv
- TLSH T1C1859D21B752C133E5E181F15ABD6FF6986CAE185B3405CBA3C01EB559305E33A3DA3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_fede865874ea317c58e007d8f14e44d0_amadey_coinminer_darkgate_elex_luca-stealer_njrat_smoke-loader_wannacry.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_fede865874ea317c58e007d8f14e44d0_amadey_coinminer_darkgate_elex_luca-stealer_njrat_smoke-loader_wannacry
- Size 1.7MB
- SHA256 569a6d73d7b5048603bb6d93b83c3498233f3a5bec2e56713e72b42a15e4ec0c
- MD5 fede865874ea317c58e007d8f14e44d0
- SHA1 c7107998167ddee369d51210f1cbc1a3991895d7
- SHA512 8de973b1c7d6f4a0a4a0c1db67883a93e59b96d671d2a87e7ea9e0b0fb408c77be3ae4971e4f9835247cb6df79c28a7984f835f43a5a1e331f3ca8616c772c5c
- SSDEEP 49152:/7rotv2EZ/WC22VOorlgoJeVPKQnLafr06HLP+c1h65ni/S/buO+Y:fotv2y22n06HLP+cqUUv
- TLSH T1C1859D21B752C133E5E181F15ABD6FF6986CAE185B3405CBA3C01EB559305E33A3DA3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.