General
- Target 2026-10-28_5315809c6a377ba36a28fe46dccfc440_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_magniber_njrat
- Size 6.6MB
- Sample261030-e7ecqahs6v
- SHA256 e2851e074010eb838ccd69515d611b9585184967bb738173478e45ac7c77c794
- MD5 5315809c6a377ba36a28fe46dccfc440
- SHA1 3777e8cfec2eb47e09b8bf2e25230188fc91c8bd
- SHA512 7ea6dc668737400841f4ec6abc3ca818840cb123bf250d0e1f9db1b10a8d4bb088dd8cbe4c30ba25354ef84d6372511e306423b8c0912699e96f9a13565c85ff
- SSDEEP 98304:ixvXWL7mlkPO0CsJZhaT4KVOGZvPRABKnMphs/g1WwxS9TQ+PYnIoE9/tyF5C:cG3mlOO7sjUDJz1g1WW+PtoQ/k6
- TLSH T1A666CF12F911C031E5D201F2A6BD6FB5987D9D34173949E7ABC81DB849306E3363AB2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-28_5315809c6a377ba36a28fe46dccfc440_amadey_coinminer_darkgate_elex_glassworm_hijackloader_lu.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_5315809c6a377ba36a28fe46dccfc440_amadey_coinminer_darkgate_elex_glassworm_hijackloader_lu.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_5315809c6a377ba36a28fe46dccfc440_amadey_coinminer_darkgate_elex_glassworm_hijackloader_luca-stealer_magniber_njrat
- Size 6.6MB
- SHA256 e2851e074010eb838ccd69515d611b9585184967bb738173478e45ac7c77c794
- MD5 5315809c6a377ba36a28fe46dccfc440
- SHA1 3777e8cfec2eb47e09b8bf2e25230188fc91c8bd
- SHA512 7ea6dc668737400841f4ec6abc3ca818840cb123bf250d0e1f9db1b10a8d4bb088dd8cbe4c30ba25354ef84d6372511e306423b8c0912699e96f9a13565c85ff
- SSDEEP 98304:ixvXWL7mlkPO0CsJZhaT4KVOGZvPRABKnMphs/g1WwxS9TQ+PYnIoE9/tyF5C:cG3mlOO7sjUDJz1g1WW+PtoQ/k6
- TLSH T1A666CF12F911C031E5D201F2A6BD6FB5987D9D34173949E7ABC81DB849306E3363AB2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables containing URLs to raw contents of a Github gist
-
Checks whether UAC is enabled