General
- Target 2026-10-14_93e4370e9440ba945f01bef180507a02_amadey_coinminer_darpapox_elex_hijackloader_jaku_luca-stealer_njrat_nymaim_rhadamanthys_wannacry
- Size 2.0MB
- Sample261014-t3mkvsfx9x
- SHA256 d31ce706f14b2d7653258b97d38f57343f670c610da9b8719faf76ea8026eb10
- MD5 93e4370e9440ba945f01bef180507a02
- SHA1 e258eba8e7afbef16eef09e9dcf1c48d176c4e90
- SHA512 79fd8df36c4df9455132cef3aa7761a750a6a3a687b803217e88ec756f9d34b366f1cd6651e38e3d1ffda47a84bb2da2c6a91f4424ee2f1cee8566542863f4da
- SSDEEP 49152:+qjiUBbTChxKCnFnQXBbrtgb/iQvu0UHOaYmL5:+PUB6hxvWbrtUTrUHO29
- TLSH T15DA5EF112780CC61F32FC63203D0AEB479776D302BB2DC8EDA5879355BB1A5BD7A215A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-14_93e4370e9440ba945f01bef180507a02_amadey_coinminer_darpapox_elex_hijackloader_jaku_luca-st.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-14_93e4370e9440ba945f01bef180507a02_amadey_coinminer_darpapox_elex_hijackloader_jaku_luca-st.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-14_93e4370e9440ba945f01bef180507a02_amadey_coinminer_darpapox_elex_hijackloader_jaku_luca-stealer_njrat_nymaim_rhadamanthys_wannacry
- Size 2.0MB
- SHA256 d31ce706f14b2d7653258b97d38f57343f670c610da9b8719faf76ea8026eb10
- MD5 93e4370e9440ba945f01bef180507a02
- SHA1 e258eba8e7afbef16eef09e9dcf1c48d176c4e90
- SHA512 79fd8df36c4df9455132cef3aa7761a750a6a3a687b803217e88ec756f9d34b366f1cd6651e38e3d1ffda47a84bb2da2c6a91f4424ee2f1cee8566542863f4da
- SSDEEP 49152:+qjiUBbTChxKCnFnQXBbrtgb/iQvu0UHOaYmL5:+PUB6hxvWbrtUTrUHO29
- TLSH T15DA5EF112780CC61F32FC63203D0AEB479776D302BB2DC8EDA5879355BB1A5BD7A215A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1