General
- Target 2026-10-23_59cac3fb052556446fb1a885dee25955_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 2.2MB
- Sample261023-n4yfvsdw4n
- SHA256 232cf0c7ef9a5b8924262e704cee54573ef83d4880062e39893d6e3f18c8967a
- MD5 59cac3fb052556446fb1a885dee25955
- SHA1 0eaef99d6488a9a92a908951d41ec6be865e62a1
- SHA512 7a97da9aa0347b71a158ac609a804636dfc2daeb66d39753d8b02d915e11dd1de79e836ad148d0fcc60e69a7b5ef11a1150c2ea524468789e78c6d0ea4895a1c
- SSDEEP 24576:rv2Bu7i8GdTDb1ncP2Irqc2xXIE2IKcoQhIoNydyTAV+mY1o1VcQyyGJyAV+muLC:rvM8GdTDb1ncP2ImpXIEMcEoU0NeIq
- TLSH T197B5F86176E7AA29E4F29434C630E2B144936CE39E2632039E4E9F897E314F547D47B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-23_59cac3fb052556446fb1a885dee25955_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-23_59cac3fb052556446fb1a885dee25955_coinminer_elex_glassworm_luca-stealer_medusalocker_njrat_remcos
- Size 2.2MB
- SHA256 232cf0c7ef9a5b8924262e704cee54573ef83d4880062e39893d6e3f18c8967a
- MD5 59cac3fb052556446fb1a885dee25955
- SHA1 0eaef99d6488a9a92a908951d41ec6be865e62a1
- SHA512 7a97da9aa0347b71a158ac609a804636dfc2daeb66d39753d8b02d915e11dd1de79e836ad148d0fcc60e69a7b5ef11a1150c2ea524468789e78c6d0ea4895a1c
- SSDEEP 24576:rv2Bu7i8GdTDb1ncP2Irqc2xXIE2IKcoQhIoNydyTAV+mY1o1VcQyyGJyAV+muLC:rvM8GdTDb1ncP2ImpXIEMcEoU0NeIq
- TLSH T197B5F86176E7AA29E4F29434C630E2B144936CE39E2632039E4E9F897E314F547D47B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
UPX dump on OEP (original entry point)
Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL