General
- Target 2026-10-01_9bfa8aef28f2f4af9d1bb96661d0aeaf_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 2.4MB
- Sample261002-jp48msxdrh
- SHA256 755c723a812b5328afc9d50704faa46584c2b72ae9eabf96478bdcd0d04748bf
- MD5 9bfa8aef28f2f4af9d1bb96661d0aeaf
- SHA1 0697b016819c7738761f9552abe284b92b91c48f
- SHA512 c2d3019a1ed7c6350921b070ade88ccda9d01af09df64906f86817973f74c56421cb63dc270f2bbc84980dad61b403cfbe84b3aa24ff90f2c05600ace50edeed
- SSDEEP 49152:8OMFLbaFbFgqiGNoJVil8V1VfO3YPfMM:oTqQpOInM
- TLSH T169C55C017681C83BC6720730CCB5D2F82579BD98ED224B5F7688FF9F3E316426A91669
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-01_9bfa8aef28f2f4af9d1bb96661d0aeaf_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_9bfa8aef28f2f4af9d1bb96661d0aeaf_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 2.4MB
- SHA256 755c723a812b5328afc9d50704faa46584c2b72ae9eabf96478bdcd0d04748bf
- MD5 9bfa8aef28f2f4af9d1bb96661d0aeaf
- SHA1 0697b016819c7738761f9552abe284b92b91c48f
- SHA512 c2d3019a1ed7c6350921b070ade88ccda9d01af09df64906f86817973f74c56421cb63dc270f2bbc84980dad61b403cfbe84b3aa24ff90f2c05600ace50edeed
- SSDEEP 49152:8OMFLbaFbFgqiGNoJVil8V1VfO3YPfMM:oTqQpOInM
- TLSH T169C55C017681C83BC6720730CCB5D2F82579BD98ED224B5F7688FF9F3E316426A91669
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.