General
- Target 2026-08-27_f5eab57e05b10fa278c325603547fb72_amadey_coinminer_darkgate_elex_floxif_glassworm_luca-stealer_njrat_smoke-loader_swisyn
- Size 7.3MB
- Sample260828-brt7fsscpf
- SHA256 7fb5dd6a33ffcd7a88318aa4354f90aa7353ed8cfa0232e2e0cca049623e0819
- MD5 f5eab57e05b10fa278c325603547fb72
- SHA1 1b50a5e215a28f1bf40d4f89d074c97e2b60e446
- SHA512 86933a4147a57b05929e4faca927b9544656a1e22ea7fa860486ad779c32db6d38d49d4889c8e5984aa20531b6a51ddf378696950a1568e8dd0ef3cdc863d6c7
- SSDEEP 196608:piXXKRIL6xPSj/takCPip6YdwCptdJbeGTM0ZCWdcB1H:ca22xKhafKFtdNOX
- TLSH T17B768C23A6D54676F2B323B06E38B75A8D69FD3D0A31804F63D4154DCAB4FC29A25723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_f5eab57e05b10fa278c325603547fb72_amadey_coinminer_darkgate_elex_floxif_glassworm_luca-ste.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_f5eab57e05b10fa278c325603547fb72_amadey_coinminer_darkgate_elex_floxif_glassworm_luca-ste.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_f5eab57e05b10fa278c325603547fb72_amadey_coinminer_darkgate_elex_floxif_glassworm_luca-stealer_njrat_smoke-loader_swisyn
- Size 7.3MB
- SHA256 7fb5dd6a33ffcd7a88318aa4354f90aa7353ed8cfa0232e2e0cca049623e0819
- MD5 f5eab57e05b10fa278c325603547fb72
- SHA1 1b50a5e215a28f1bf40d4f89d074c97e2b60e446
- SHA512 86933a4147a57b05929e4faca927b9544656a1e22ea7fa860486ad779c32db6d38d49d4889c8e5984aa20531b6a51ddf378696950a1568e8dd0ef3cdc863d6c7
- SSDEEP 196608:piXXKRIL6xPSj/takCPip6YdwCptdJbeGTM0ZCWdcB1H:ca22xKhafKFtdNOX
- TLSH T17B768C23A6D54676F2B323B06E38B75A8D69FD3D0A31804F63D4154DCAB4FC29A25723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory