General
- Target 2026-09-06_46221ca113fb311d74aa66243997d0ef_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_poet-rat_remcos_smoke-loader
- Size 60.0MB
- Sample260907-esbnaacl7x
- SHA256 fa819a0be66ef9a471a2bcc189813c06fcf125665b7b3ef6773157c52348f526
- MD5 46221ca113fb311d74aa66243997d0ef
- SHA1 fbe4138750bc0422ea2b017cea589ea7bc5b57f0
- SHA512 02dd25f388c93a858d09a90580fe13385f1344922735c89f8183b9ca24d6446f3117d585961e02b7cafa7b0ccfd0520c0ff893431be63fc887feebf91e123e97
- SSDEEP 196608:DHh6ImzD+FjHh6ImzD+FjHh6ImzD+FjHh6ImzD+FJFIF0wun:uZZZ6n
- TLSH T169D76C05F98740B1D91B51B00DDBD3BF8630BB1587228EE7FB8C8B5BA923BE16535216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_46221ca113fb311d74aa66243997d0ef_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hijack.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_46221ca113fb311d74aa66243997d0ef_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hijack.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_46221ca113fb311d74aa66243997d0ef_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_poet-rat_remcos_smoke-loader
- Size 60.0MB
- SHA256 fa819a0be66ef9a471a2bcc189813c06fcf125665b7b3ef6773157c52348f526
- MD5 46221ca113fb311d74aa66243997d0ef
- SHA1 fbe4138750bc0422ea2b017cea589ea7bc5b57f0
- SHA512 02dd25f388c93a858d09a90580fe13385f1344922735c89f8183b9ca24d6446f3117d585961e02b7cafa7b0ccfd0520c0ff893431be63fc887feebf91e123e97
- SSDEEP 196608:DHh6ImzD+FjHh6ImzD+FjHh6ImzD+FjHh6ImzD+FJFIF0wun:uZZZ6n
- TLSH T169D76C05F98740B1D91B51B00DDBD3BF8630BB1587228EE7FB8C8B5BA923BE16535216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1