General
- Target 2026-08-22_a2d14c9bffddb6bd8d95789da927401c_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_wannacry
- Size 16.2MB
- Sample260823-d2776sxtbv
- SHA256 c6b4bab1c348c4788d3c651f3ef7971c1687351369da10f93238a5e4ede8bd5b
- MD5 a2d14c9bffddb6bd8d95789da927401c
- SHA1 cd06df767f8ce7551e33513671807f9afd5d7e4e
- SHA512 cb22f30da3d87ea96951b991d0f55fac712a90af93032ac66220c6ab537c6689424266508c6cc36edf9c9bd1d797494013a4e0315e6d214bf984e97c9e9c4584
- SSDEEP 393216:BV2S5Zl05YflfxgkTVfdBL/tEJ1+lFj99e2xXX+QU9DrFkpBg:ZZl05Yt+kTVTL/xlFVaP1
- TLSH T1F3079D23A64140B1C18221BDCC3AEEBD616DAE15873415C753947C17AA72FC3AA3EB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-22_a2d14c9bffddb6bd8d95789da927401c_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_wannacry.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_a2d14c9bffddb6bd8d95789da927401c_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_wannacry.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_a2d14c9bffddb6bd8d95789da927401c_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_wannacry
- Size 16.2MB
- SHA256 c6b4bab1c348c4788d3c651f3ef7971c1687351369da10f93238a5e4ede8bd5b
- MD5 a2d14c9bffddb6bd8d95789da927401c
- SHA1 cd06df767f8ce7551e33513671807f9afd5d7e4e
- SHA512 cb22f30da3d87ea96951b991d0f55fac712a90af93032ac66220c6ab537c6689424266508c6cc36edf9c9bd1d797494013a4e0315e6d214bf984e97c9e9c4584
- SSDEEP 393216:BV2S5Zl05YflfxgkTVfdBL/tEJ1+lFj99e2xXX+QU9DrFkpBg:ZZl05Yt+kTVTL/xlFVaP1
- TLSH T1F3079D23A64140B1C18221BDCC3AEEBD616DAE15873415C753947C17AA72FC3AA3EB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory