General
- Target 2026-09-26_4cdc074efaa5cc9f93381f9256c69c21_coinminer_darkgate_elex_glassworm_hawkeye_luca-stealer_magniber_njrat_remcos_zxxz
- Size 5.4MB
- Sample260926-268lhatcqd
- SHA256 b746acd9ed9f59f4fd9167726285548a0602aa4c09d0ca7783eb1d342d2533f5
- MD5 4cdc074efaa5cc9f93381f9256c69c21
- SHA1 9cc15443f0e743dc1d9973b16c370843d960be25
- SHA512 5962b699992d7143913ceea5185a17d3b0a233233c23c066f482954bd6a007b63b713aade22a478ae41936f948491ee5bc345586987071abead91f2670a9f5ca
- SSDEEP 98304:03Oze2FkDY8YgcadgEl4LRfcwFV9JrMZ:CO7PKlG2
- TLSH T10246BF527A81C035D79614314C2B776852F7EEB00A7186F773E8BA2D3D306D2A93A763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-09-26_4cdc074efaa5cc9f93381f9256c69c21_coinminer_darkgate_elex_glassworm_hawkeye_luca-stealer_m.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-26_4cdc074efaa5cc9f93381f9256c69c21_coinminer_darkgate_elex_glassworm_hawkeye_luca-stealer_m.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-26_4cdc074efaa5cc9f93381f9256c69c21_coinminer_darkgate_elex_glassworm_hawkeye_luca-stealer_magniber_njrat_remcos_zxxz
- Size 5.4MB
- SHA256 b746acd9ed9f59f4fd9167726285548a0602aa4c09d0ca7783eb1d342d2533f5
- MD5 4cdc074efaa5cc9f93381f9256c69c21
- SHA1 9cc15443f0e743dc1d9973b16c370843d960be25
- SHA512 5962b699992d7143913ceea5185a17d3b0a233233c23c066f482954bd6a007b63b713aade22a478ae41936f948491ee5bc345586987071abead91f2670a9f5ca
- SSDEEP 98304:03Oze2FkDY8YgcadgEl4LRfcwFV9JrMZ:CO7PKlG2
- TLSH T10246BF527A81C035D79614314C2B776852F7EEB00A7186F773E8BA2D3D306D2A93A763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.