Analysis
- max time kernel
0s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/08/2026, 22:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-29_ff6040e98aa7796404f479852edbb187_amadey_coinminer_darkgate_elex_luca-stealer_lynx_njrat_play_remcos_rugmi.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-29_ff6040e98aa7796404f479852edbb187_amadey_coinminer_darkgate_elex_luca-stealer_lynx_njrat_play_remcos_rugmi.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2026-08-29_ff6040e98aa7796404f479852edbb187_amadey_coinminer_darkgate_elex_luca-stealer_lynx_njrat_play_remcos_rugmi.exe
command="C:\Users\Admin\AppData\Local\Temp\2026-08-29_ff6040e98aa7796404f479852edbb187_amadey_coinminer_darkgate_elex_luca-stealer_lynx_njrat_play_remcos_rugmi.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: Invalid access to memory location.
General
- Target 2026-08-29_ff6040e98aa7796404f479852edbb187_amadey_coinminer_darkgate_elex_luca-stealer_lynx_njrat_play_remcos_rugmi.exe
- Size 972KB
- Sample260830-2m9pfsar5w
- SHA256 03c648956ea6af013756d79d2100caac333f177e583d0d8d1c147c384378265d
- MD5 ff6040e98aa7796404f479852edbb187
- SHA1 49724e800a4bc2d3753e990b1849fe0fee2eb316
- SHA512 77e1c0319e43f9c6e5ef9cd02af0c80ecc49a4f88340d74a57850c39a8ac9d59129715a3deee556bb773b96d7dde90a961f58046514451f38ad965c6ecc64634
- SSDEEP 24576:PL+3WnIZuMCxezot7UGyYHcs9CKP3D9f9N+53VsGrPAwK:PaLZ5zot7UcV9CUh1N+lVHrjK
- TLSH T15325AE3365A14032E6F10573BA24D530BE7CAF28275189AEE3D4BE1E3D744D1A7B7252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10