General
- Target 2026-09-24_312bfb9c6785e1ec7798afcc66aad470_coinminer_elex_glassworm_hawkeye_luca-stealer_magniber_njrat_remcos_zxxz
- Size 5.2MB
- Sample260925-ppcfhsssaw
- SHA256 92c1d6842cb2329d3f44076bf5b293a5f7fb26a17d44f52dd1399a4a0bd7f1a3
- MD5 312bfb9c6785e1ec7798afcc66aad470
- SHA1 a407aef2cf24ccb79132650b3f5cf5d9708ef37b
- SHA512 a816b0c6ced70de2636c4c666aec18e57ccd46b7b1d0a3c2b1f8d3462e3abed0d3a10b04a94ec28ad01a1625f2a3fa3fbc2c8d460433a2719309b5b01128d58d
- SSDEEP 98304:g/AB19C5T7ArDIV+X5q8rkmLRfSa3VSArKZ:g/wm7jE5q8CH
- TLSH T17A46BF13BAD5C039C6D604314C2BB75951F7EEA00AB086F77398BA2D3A306D2A63D757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-24_312bfb9c6785e1ec7798afcc66aad470_coinminer_elex_glassworm_hawkeye_luca-stealer_magniber_njrat_remcos_zxxz.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-24_312bfb9c6785e1ec7798afcc66aad470_coinminer_elex_glassworm_hawkeye_luca-stealer_magniber_njrat_remcos_zxxz.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-24_312bfb9c6785e1ec7798afcc66aad470_coinminer_elex_glassworm_hawkeye_luca-stealer_magniber_njrat_remcos_zxxz
- Size 5.2MB
- SHA256 92c1d6842cb2329d3f44076bf5b293a5f7fb26a17d44f52dd1399a4a0bd7f1a3
- MD5 312bfb9c6785e1ec7798afcc66aad470
- SHA1 a407aef2cf24ccb79132650b3f5cf5d9708ef37b
- SHA512 a816b0c6ced70de2636c4c666aec18e57ccd46b7b1d0a3c2b1f8d3462e3abed0d3a10b04a94ec28ad01a1625f2a3fa3fbc2c8d460433a2719309b5b01128d58d
- SSDEEP 98304:g/AB19C5T7ArDIV+X5q8rkmLRfSa3VSArKZ:g/wm7jE5q8CH
- TLSH T17A46BF13BAD5C039C6D604314C2BB75951F7EEA00AB086F77398BA2D3A306D2A63D757
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.