General
- Target 2026-09-10_77c9ae4f298934ea20c3af583c3290cc_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_poet-rat_remcos_smoke-loader
- Size 50.7MB
- Sample260910-shgcnstvfy
- SHA256 07d10e1b5cbbe0101ab07eb4baaeec49b9e4ea90d82d2642edcaec2291a9ed2b
- MD5 77c9ae4f298934ea20c3af583c3290cc
- SHA1 1857c53a0b7a681623766d9c8da171f9ec9ecf64
- SHA512 e03d7d311f3d059467247e0629650c2be49242001ca4e7280f7f149aac8e8141c335e71bbd08575700a644b66b8f1bdae23d0e5b9e63ba8128c6dcb227e96c7d
- SSDEEP 196608:mHh6ImzD+FGHh6ImzD+FGHh6ImzD+FJFIF0wu/:9666/
- TLSH T13FC76C05F98740B1D91B50B00DDFD3BF8630BB1587228EE7FB8D8B5BA923BA16535216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_77c9ae4f298934ea20c3af583c3290cc_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hijack.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_77c9ae4f298934ea20c3af583c3290cc_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hijack.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_77c9ae4f298934ea20c3af583c3290cc_amadey_coinminer_cryptbot_darkgate_elex_glassworm_hijackloader_luca-stealer_njrat_poet-rat_remcos_smoke-loader
- Size 50.7MB
- SHA256 07d10e1b5cbbe0101ab07eb4baaeec49b9e4ea90d82d2642edcaec2291a9ed2b
- MD5 77c9ae4f298934ea20c3af583c3290cc
- SHA1 1857c53a0b7a681623766d9c8da171f9ec9ecf64
- SHA512 e03d7d311f3d059467247e0629650c2be49242001ca4e7280f7f149aac8e8141c335e71bbd08575700a644b66b8f1bdae23d0e5b9e63ba8128c6dcb227e96c7d
- SSDEEP 196608:mHh6ImzD+FGHh6ImzD+FGHh6ImzD+FJFIF0wu/:9666/
- TLSH T13FC76C05F98740B1D91B50B00DDFD3BF8630BB1587228EE7FB8D8B5BA923BA16535216
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates new service(s)
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1System Services
1Service Execution
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Scheduled Task/Job
1Scheduled Task
1