General
- Target 2026-10-01_3c44c6452905c56279917c10c6cdf9a2_amadey_coinminer_darkgate_elex_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_wannacry
- Size 4.5MB
- Sample261002-tskzaazwgz
- SHA256 790977bda72d7fcdf64efc03b66ffe397ce2283d0f034690de085813821f7872
- MD5 3c44c6452905c56279917c10c6cdf9a2
- SHA1 1ad8328c75828fb264a506e26067aa4b88ade59b
- SHA512 5248d10fa7a22bc431f9be7db27a4a2cb464fba6d1719b3d61712806525d80b52ea22d0343bf6c5d4f2515d737a92bf598f2a53acf6f09343bac3300c7820a18
- SSDEEP 98304:xWgpPOBfK4AcZykDwSt/hxS9MYgQRcFxt7Ejay1w1y7fSFJspDLOMgdf:HyDBhxMHur7gay0pIDLwx
- TLSH T1BD2623067B80CC72E26B84324BD4AB75B27F79606F22C98B67C449381F71DC7E724696
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-01_3c44c6452905c56279917c10c6cdf9a2_amadey_coinminer_darkgate_elex_hijackloader_luca-stealer.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-01_3c44c6452905c56279917c10c6cdf9a2_amadey_coinminer_darkgate_elex_hijackloader_luca-stealer.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-01_3c44c6452905c56279917c10c6cdf9a2_amadey_coinminer_darkgate_elex_hijackloader_luca-stealer_njrat_nymaim_rhadamanthys_wannacry
- Size 4.5MB
- SHA256 790977bda72d7fcdf64efc03b66ffe397ce2283d0f034690de085813821f7872
- MD5 3c44c6452905c56279917c10c6cdf9a2
- SHA1 1ad8328c75828fb264a506e26067aa4b88ade59b
- SHA512 5248d10fa7a22bc431f9be7db27a4a2cb464fba6d1719b3d61712806525d80b52ea22d0343bf6c5d4f2515d737a92bf598f2a53acf6f09343bac3300c7820a18
- SSDEEP 98304:xWgpPOBfK4AcZykDwSt/hxS9MYgQRcFxt7Ejay1w1y7fSFJspDLOMgdf:HyDBhxMHur7gay0pIDLwx
- TLSH T1BD2623067B80CC72E26B84324BD4AB75B27F79606F22C98B67C449381F71DC7E724696
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application