General
- Target 2026-08-27_f0963d3577dacdf32c455281fa94e3af_amadey_blankgrabber_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_revil_smoke-loader
- Size 5.8MB
- Sample260828-cl577sem6w
- SHA256 98ec85f0d98a135b83aaec616f2da133264f5e8b08d308428c98512482745338
- MD5 f0963d3577dacdf32c455281fa94e3af
- SHA1 0196db63349b2d8161961c90ab2ee840e686e774
- SHA512 5944147b9243d550a3267c0638e5d1660b5c35d03dcfd5a9e7e321421a89c96a0a7c9af3865bbbdcb0ce5805e407b0c2ba90f5f423bb93bd1226fd0758204d05
- SSDEEP 98304:/enyzZLvyUP6ZVYsPHpIPIIwy5AG8H4TWr9XKitMQM5SSDntdDpbRZy:/enyzZL6UykYpIQIZBBUYFSintdDFRo
- TLSH T10B568E227603C532D9920170967DAFBB985C9D304B1A99D3F3C07F5EACB11C25A36F6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-27_f0963d3577dacdf32c455281fa94e3af_amadey_blankgrabber_coinminer_darkgate_elex_glassworm_lu.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_f0963d3577dacdf32c455281fa94e3af_amadey_blankgrabber_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_revil_smoke-loader
- Size 5.8MB
- SHA256 98ec85f0d98a135b83aaec616f2da133264f5e8b08d308428c98512482745338
- MD5 f0963d3577dacdf32c455281fa94e3af
- SHA1 0196db63349b2d8161961c90ab2ee840e686e774
- SHA512 5944147b9243d550a3267c0638e5d1660b5c35d03dcfd5a9e7e321421a89c96a0a7c9af3865bbbdcb0ce5805e407b0c2ba90f5f423bb93bd1226fd0758204d05
- SSDEEP 98304:/enyzZLvyUP6ZVYsPHpIPIIwy5AG8H4TWr9XKitMQM5SSDntdDpbRZy:/enyzZL6UykYpIQIZBBUYFSintdDFRo
- TLSH T10B568E227603C532D9920170967DAFBB985C9D304B1A99D3F3C07F5EACB11C25A36F6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1