General
- Target 2026-11-03_6bf32aea3d3900c5a8ecfd014428d8e4_amadey_blankgrabber_coinminer_elex_glassworm_luca-stealer_njrat_smoke-loader_stop
- Size 37.9MB
- Sample261104-wez76attbw
- SHA256 263b63192acf597e09f19d2c1fb3f9407e9085af5a17aba257601f662c2c8e94
- MD5 6bf32aea3d3900c5a8ecfd014428d8e4
- SHA1 8260619d1e5198b01b6c961f74760f0329d6947f
- SHA512 708abce8f69cf03fee2ba9f284e7da6ed7c0baaf1d93cadfd86e6046e75b692fb6725a95d1f72d6ff622ff3c43f8e2d29b62f26a815656372d0c8601542b8d45
- SSDEEP 786432:hLuRK7/oQuOiOhATL7lAcdl1oec9xYYbPUJZCv4Tf1pLB5Lt4n:SIQOiXpdUeeXP8gvAnt4n
- TLSH T1C097234BBF8A44E2E5C21872535B57FB06379E14871888F39BC5349A9433BE8663F385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-03_6bf32aea3d3900c5a8ecfd014428d8e4_amadey_blankgrabber_coinminer_elex_glassworm_luca-steale.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-03_6bf32aea3d3900c5a8ecfd014428d8e4_amadey_blankgrabber_coinminer_elex_glassworm_luca-steale.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-03_6bf32aea3d3900c5a8ecfd014428d8e4_amadey_blankgrabber_coinminer_elex_glassworm_luca-stealer_njrat_smoke-loader_stop
- Size 37.9MB
- SHA256 263b63192acf597e09f19d2c1fb3f9407e9085af5a17aba257601f662c2c8e94
- MD5 6bf32aea3d3900c5a8ecfd014428d8e4
- SHA1 8260619d1e5198b01b6c961f74760f0329d6947f
- SHA512 708abce8f69cf03fee2ba9f284e7da6ed7c0baaf1d93cadfd86e6046e75b692fb6725a95d1f72d6ff622ff3c43f8e2d29b62f26a815656372d0c8601542b8d45
- SSDEEP 786432:hLuRK7/oQuOiOhATL7lAcdl1oec9xYYbPUJZCv4Tf1pLB5Lt4n:SIQOiXpdUeeXP8gvAnt4n
- TLSH T1C097234BBF8A44E2E5C21872535B57FB06379E14871888F39BC5349A9433BE8663F385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious use of NtSetInformationThreadHideFromDebugger