General
- Target 2026-11-01_eda9cd28eae816e66fbb0764453b2ac8_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 4.9MB
- Sample261102-embq4ag12m
- SHA256 72cf9d354a897d4287144f15e91eaf623df1148076971b022a751d5f80351058
- MD5 eda9cd28eae816e66fbb0764453b2ac8
- SHA1 46320fe28d55750794a625a9b4df55df5bb1bead
- SHA512 88118a9081cecbd2c41c6152dffc3f1e316fd16b68f185a6bcc2402ac96195f65cd6bad698cc6172c67e62b96dcc1c90bd57155b32175635d15d33cd74b325bd
- SSDEEP 98304:oMQdyRfEW3MY3D+qtvcP1RkvdvLsBYMc4wKe3m2uXT+EzKh5nzWEREa8rSex:oRyfEW3M8DNtkP1RkFvt4wiDnzgNYek
- TLSH T1FC36C011FA058022E9D101B2E26E6FB3893C9A38177644DBA6D05DB599312F37B3CB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-11-01_eda9cd28eae816e66fbb0764453b2ac8_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_eda9cd28eae816e66fbb0764453b2ac8_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_njrat_revil
- Size 4.9MB
- SHA256 72cf9d354a897d4287144f15e91eaf623df1148076971b022a751d5f80351058
- MD5 eda9cd28eae816e66fbb0764453b2ac8
- SHA1 46320fe28d55750794a625a9b4df55df5bb1bead
- SHA512 88118a9081cecbd2c41c6152dffc3f1e316fd16b68f185a6bcc2402ac96195f65cd6bad698cc6172c67e62b96dcc1c90bd57155b32175635d15d33cd74b325bd
- SSDEEP 98304:oMQdyRfEW3MY3D+qtvcP1RkvdvLsBYMc4wKe3m2uXT+EzKh5nzWEREa8rSex:oRyfEW3M8DNtkP1RkFvt4wiDnzgNYek
- TLSH T1FC36C011FA058022E9D101B2E26E6FB3893C9A38177644DBA6D05DB599312F37B3CB5F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Windows executables referencing non-Windows User-Agents
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.