Overview

overview

3

Static

static

1

2026-10-16...il.exe

windows10-2004-x64

3

2026-10-16...il.exe

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    17/10/2026, 04:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-10-16_e4673d5521f2561ae2a3c4d86103ec53_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
  • Size 3.1MB
  • Sample261017-e32bpahv6j
  • SHA256 d02e2f6c2ef750d5e93910f371c2e874f6b96d407a65fba87f7718f23eba9a59
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-10-16_e4673d5521f2561ae2a3c4d86103ec53_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-10-16_e4673d5521f2561ae2a3c4d86103ec53_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe"
    1⤵
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:4800

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Montserrat-Bold.eot
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\Montserrat-Bold.eot
        • Size 256KB
        • SHA256 7615a4bb88a5680cfead49c1774013ce48c4c7343cb82d7585f7935c705400b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Montserrat-Regular.eot
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\Montserrat-Regular.eot
        • Size 314KB
        • SHA256 057bc6c47c47aaccdf31adc48a6b401f6090a02c28e354099eff80907dc2af32
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Roboto-Regular.eot
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\Roboto-Regular.eot
        • Size 176KB
        • SHA256 6cedf381d59fa4caabfb836e9a3720420645cbcea32491a5ac5f07cf274ceac6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        av360-check-on.png
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\av360-check-on.png
        • Size 445B
        • SHA256 8b8f0ad0cdf07227f759cb18c64ff64ae72fcbfc7916524acb355d889ddece3f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        av360.png
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\av360.png
        • Size 216KB
        • SHA256 caec781eb9c39273dacfb6227adf6db3927b4c55d7591158fe8101238edb2032
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        close-gray.png
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\close-gray.png
        • Size 268B
        • SHA256 9ba220b02676f499296b258227582e7f9347890e530d0e6795aa476150d909c3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        close-lightgray-14px.png
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\close-lightgray-14px.png
        • Size 271B
        • SHA256 2d445a49383ef3d251935caebe0a7b178f0bd69b20e54a44f67394409b6141a7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        close-white.png
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\close-white.png
        • Size 264B
        • SHA256 c1d3c989cfc39531d46e25867e0f15c552688b3fbef8f5bd59dbae303aae9048
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        main-logo-white.png
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\main-logo-white.png
        • Size 6KB
        • SHA256 e3990165ef06c69e64a8c8edd9c1a6b109a6f748e5305009e27adbc45cbff656
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        opera-check-on.png
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\opera-check-on.png
        • Size 378B
        • SHA256 4fef700a16ebb413d3ecae78ab8d1462a5f916afb4ecc567c8ef300a66aa19ed
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        opera-empty.png
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\opera-empty.png
        • Size 107KB
        • SHA256 d163d272e617caf16dca98cf25721b6b78a7a5ec59552af71fb4704758741a14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        point.png
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\point.png
        • Size 159B
        • SHA256 0914121c7693afd3b625929d540acb7942401d6f46736e6cb8bbf59276d7a1b6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        settings-checked.png
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\settings-checked.png
        • Size 382B
        • SHA256 d05f0be137ed891926de83bb83fa46c78d01da09b2fb6d62d1fa7dfb57701229
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        soax-mglogo.png
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\soax-mglogo.png
        • Size 4KB
        • SHA256 cce96ae129b268e5a1fed76ce3e2e7e6eb3a5a9c4ba87fd6c22394863a6585e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        soax-schema.png
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\img2\soax-schema.png
        • Size 2KB
        • SHA256 1398ff3a4bf9bb8011cb5230919bf48f72bdc5f34e3917d773edca3d3a758363
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        index.html
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\index.html
        • Size 39KB
        • SHA256 9b475d52a4bd3813a1fbdbc9d18f188294d64e894aabc359b39248815ad62083
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        preloader.html
        • Path C:\Users\Admin\AppData\Local\Temp\mediaget-installer-tmp\preloader.html
        • Size 266B
        • SHA256 ac071e1f7162b4d4a9a195b52fe138a665af7fc207e39ca5d047338acd6a55b3
        • MD5 SHA1 SHA512 TLSH
        Submit Download