General
- Target 2026-08-26_f87d09ff1d699565e21761a7d4ae6ce8_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader
- Size 14.4MB
- Sample260827-bvntvaydnc
- SHA256 fb30390b2db7a8b1dc60cd450f8f471aa0071664861dea592ee4d91f8ccb6f35
- MD5 f87d09ff1d699565e21761a7d4ae6ce8
- SHA1 ec1f7e2473d9af1b5e481d0c5bb70338aaabf424
- SHA512 540f23a6cc790575e23e37060e09c785fee8e092e5131a36777c41c6764c1cddfe25927022c220234a5baf2e1be828f4b571ead38c06afb9894ce7ab83c0e3bc
- SSDEEP 196608:WWIywrbZcSFpUD6o93iBVhaQXGqtw+gxCHcEWJ7+AkZnXI1NmECL2fGwyNA28IJG:tFwnBgDdiBfEScEW1oPcr86
- TLSH T19EE67C11E7D74274FE731A309976A22E463FBD614AB1CD4FD28C294D5BB39818821B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-26_f87d09ff1d699565e21761a7d4ae6ce8_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_nj.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_f87d09ff1d699565e21761a7d4ae6ce8_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_remcos_rhadamanthys_smoke-loader
- Size 14.4MB
- SHA256 fb30390b2db7a8b1dc60cd450f8f471aa0071664861dea592ee4d91f8ccb6f35
- MD5 f87d09ff1d699565e21761a7d4ae6ce8
- SHA1 ec1f7e2473d9af1b5e481d0c5bb70338aaabf424
- SHA512 540f23a6cc790575e23e37060e09c785fee8e092e5131a36777c41c6764c1cddfe25927022c220234a5baf2e1be828f4b571ead38c06afb9894ce7ab83c0e3bc
- SSDEEP 196608:WWIywrbZcSFpUD6o93iBVhaQXGqtw+gxCHcEWJ7+AkZnXI1NmECL2fGwyNA28IJG:tFwnBgDdiBfEScEW1oPcr86
- TLSH T19EE67C11E7D74274FE731A309976A22E463FBD614AB1CD4FD28C294D5BB39818821B2F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.