General
- Target 2026-09-05_94825f53245ff8e61ef4dc7f48ba81b3_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hellokitty_hijackloader_icedid_luca-stealer_njrat_poet-rat_smoke-loader
- Size 49.9MB
- Sample260907-pbecysgg33
- SHA256 fc365c67d3b8c4da86c8b4c9226d74a0337e4849ece2b5bcf2342ecbd63e0af2
- MD5 94825f53245ff8e61ef4dc7f48ba81b3
- SHA1 176a433bb8c3b686dacb0612b97b1ebb470b7628
- SHA512 9d8e1137d165f288cb592c6c6cbe90ee9bb07db16c9aecb6e99ea3007f8791b3b1918c525935cb071e07d8301a5b3cd92eee7be52560ac4e295507e090ff8d32
- SSDEEP 196608:Zc1c1c1c1c1c1cQKWQc0gEYnvLBc1c1c1c1c1c1cQKWQc0gEYnvLBc1c1c1c1c1g:AcZEIvMcZEIvMcZEIvQc
- TLSH T126B72B09F94340B1D82B15B049CBE3BF8720BA15C6138EA7E6498FDFFBE2B915824575
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-05_94825f53245ff8e61ef4dc7f48ba81b3_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hellok.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-05_94825f53245ff8e61ef4dc7f48ba81b3_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hellok.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-05_94825f53245ff8e61ef4dc7f48ba81b3_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hellokitty_hijackloader_icedid_luca-stealer_njrat_poet-rat_smoke-loader
- Size 49.9MB
- SHA256 fc365c67d3b8c4da86c8b4c9226d74a0337e4849ece2b5bcf2342ecbd63e0af2
- MD5 94825f53245ff8e61ef4dc7f48ba81b3
- SHA1 176a433bb8c3b686dacb0612b97b1ebb470b7628
- SHA512 9d8e1137d165f288cb592c6c6cbe90ee9bb07db16c9aecb6e99ea3007f8791b3b1918c525935cb071e07d8301a5b3cd92eee7be52560ac4e295507e090ff8d32
- SSDEEP 196608:Zc1c1c1c1c1c1cQKWQc0gEYnvLBc1c1c1c1c1c1cQKWQc0gEYnvLBc1c1c1c1c1g:AcZEIvMcZEIvMcZEIvQc
- TLSH T126B72B09F94340B1D82B15B049CBE3BF8720BA15C6138EA7E6498FDFFBE2B915824575
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1