2026-09-26_d7efd05d61089c16383f30ccc55b9cb8_coinminer_elex_glassworm_hawkeye_luca-stealer_magniber_njrat_remcos_zxxz
Multi-malware trojanized uTorrent
LSASS memory dump via MiniDump APIResource anti-debug memory loader
SHA-2562e3f70f46805553bac2e7825e613f1760edea040ee6ca492f46fbee727242081
Evidence
⋯7 more rows
0x3f000000000000000000000000000000000................
0x400513d001000008d4c2408721481e90010Q=.....L$.r.....
0x41000002d0010000085013d0010000073ec..-......=....s.
0x43053568b4424180bc075188b4c24148b44SV.D$...u..L$..D
0x440241033d2f7f18bd88b44240cf7f18bd3$.3......D$.....
0x450eb418bc88b5c24148b5424108b44240c.A...\$..T$..D$.
0x460d1e9d1dbd1ead1d80bc975f4f7f38bf0..........u.....
0x470f76424188bc88b442414f7e603d1720e.d$....D$.....r.
0x4803b542410770872073b44240c76014e33;T$.w.r.;D$.v.N3
0x490d28bc65e5bc21000cccccccccccccccc...^[...........
0x4a0538b4424140bc075188b4c24108b4424S.D$...u..L$..D$
0x4b00c33d2f7f18b442408f7f18bc233d2eb.3....D$.....3..
0x4c0508bc88b5c24108b54240c8b442408d1P...\$..T$..D$..
0x4d0e9d1dbd1ead1d80bc975f4f7f38bc8f7.........u......
0x4e064241491f764241003d1720e3b54240cd$...d$...r.;T$.
0x4f07708720e3b44240876082b4424101b54w.r.;D$.v.+D$..T
0x50024142b4424081b54240cf7daf7d883da$.+D$..T$.......
0x510005bc21000cccccccccccccccccccccc.[..............
0x52080f940731580f92073060fadd0d3eac3..@s... s.......
0x5308bc233d280e11fd3e8c333c033d2c368..3.......3.3..h
0x540cb586900e81c4c230059c356be2ca771.Xi...L#.Y.V.,.q
0x5500056e847910000595056b9f8447700e8.V.G...YPV..Dw..
0x560b38e000068da586900e8f74b2300595e....h.Xi...K#.Y^
0x570c36a04e846482300c70424e9586900c7.j..FH#...$.Xi..
0x58000d4aa7100a3f0497b00e8d64b230059...q...I{...K#.Y
0x590c3a1f0497b00a3f4497b00c356be98a8...I{...I{..V...
0x5a0690056e8f6900000595056b960407500i.V.....YPV.`@u.
0x5b0e8628e00006834596900e8a64b230059.b...h4Yi...K#.Y
0x5c05ec356bef8a6690056e8d09000005950^.V...i.V.....YP
0x5d056b920417500e83c8e00006843596900V. Au..<...hCYi.
0x5e0e8804b2300595ec356be78a7690056e8..K#.Y^.V.x.i.V.
0x5f0aa900000595056b950417500e8168e00....YPV.PAu.....
0x600006852596900e85a4b2300595ec3686c.hRYi..ZK#.Y^.hl
0x610a76900b920727700e8b9370200686159.i.. rw...7..haY
0x6206900e83e4b230059c356be38a7690056i..>K#.Y.V.8.i.V
0x630e869900000595056b938417500e8d58d.i...YPV.8Au....
0x64000006870596900e8194b2300595ec356..hpYi...K#.Y^.V
0x650bedca7690056e843900000595056b968...i.V.C...YPV.h
0x660417500e8af8d0000687f596900e8f34aAu......h.Yi...J
0x6702300595ec3b9d0707700e8c938020068#.Y^...pw...8..h
0x298f94a6144000fc1540001716400023164000..@...@...@.#.@.
0x298fb4911640009b164000bb164000a5164000..@...@...@...@.
0x298fc4d116400013174000fd164000e7164000..@...@...@...@.
0x298fd461174000831740008d174000a8174000a.@...@...@...@.
0x298ff44419400029194000f81840003d184000D.@.).@...@.=.@.
0x2990045c184000a3194000e5174000c2184000\.@...@...@...@.
0x29901427184000c31740008d19400011184000'.@...@...@...@.
0x299034721840007e1840008a184000b8184000r.@.~.@...@...@.
0x299044d91740005f194000ac184000031a4000..@._.@...@...@.
0x299064bb194000f7194000d31940000f1a4000..@...@...@...@.
0x299074eb194000df194000c71940003f1a4000..@...@...@.?.@.
0x299094c51a4000031b4000f71a4000a11a4000..@...@...@...@.
0x2990b4651b4000891a40007d1a40000f1b4000e.@...@.}.@...@.
0x2990e4121c40001e1c40002a1c4000fc1b4000..@...@.*.@...@.
0x299104b91c4000c51c4000cf1c4000211d4000..@...@...@.!.@.
0x299134c11d4000e11d4000ec1d4000f81d4000..@...@...@...@.
0x299164701e4000b51e4000c11e4000d71e4000p.@...@...@...@.
0x2991948f1f40009b1f4000a71f4000cd1f4000..@...@...@...@.
0x2991a4ec1f400006204000562240001e234000..@.. @.V"@..#@.
0x2991b4c5204000b0244000e72340008e214000. @..$@..#@..!@.
0x2991d434234000db204000332a4000572740004#@.. @.3*@.W'@.
0x2991e44b274000fa27400063274000ba254000K'@..'@.c'@..%@.
0x29921406284000422940004e2940005a294000.(@.B)@.N)@.Z)@.
0x299234572a4000862540009225400032254000W*@..%@..%@.2%@.
0x2992441a25400002254000d2244000c6244000.%@..%@..$@..$@.
0x299254de2440000e254000f6244000ea244000.$@..%@..$@..$@.
0x2992647a254000262540004a2540003e254000z%@.&%@.J%@.>%@.
0x299274562540006e25400062254000f1374000V%@.n%@.b%@..7@.
0x29a3a843006f006e00740065006e0074002000C.o.n.t.e.n.t. .
0x29a3b8540079007000650000000000b8be5800T.y.p.e.......X.
0x29a3c8e4be5800b1bc5800eabc5800e0a14200..X...X...X...B.
0x29a3d86bcd5f009dc658007b954000ca5b4300k._...X.{.@..[C.
0x29a408fa57430065006e000000000064657665.WC.e.n.....deve
0x29a4186c6f700075546f7272656e7400000000lop.uTorrent....
0x29a428687474703a2f2f7570646174652e7574http://update.ut
0x29a4386f7272656e742e636f6d2f756e696e73orrent.com/unins
0x29a44874616c6c3f747970653d25732d255526tall?type=%s-%U&
0x29a458683d257326763d256400000000000000h=%s&v=%d.......
0x29a46853006f00660074007700610072006500S.o.f.t.w.a.r.e.
0x29a4785c004d006900630072006f0073006f00\.M.i.c.r.o.s.o.
0x29a488660074005c00570069006e0064006f00f.t.\.W.i.n.d.o.
0x29a498770073005c0043007500720072006500w.s.\.C.u.r.r.e.
0x29a4a86e007400560065007200730069006f00n.t.V.e.r.s.i.o.
0x29a4b86e005c004500780070006c006f007200n.\.E.x.p.l.o.r.
0x29a4c8650072005c00460069006c0065004500e.r.\.F.i.l.e.E.
0x29a4d87800740073005c00250073005c004f00x.t.s.\.%.s.\.O.
0x29a4e8700065006e0057006900740068005000p.e.n.W.i.t.h.P.
0x29a4f872006f0067006900640073005c002500r.o.g.i.d.s.\.%.
0x29a508730000000000000053006f0066007400s.......S.o.f.t.
0x29a51877006100720065005c0043006c006100w.a.r.e.\.C.l.a.
0x29a52873007300650073005c004d0049004d00s.s.e.s.\.M.I.M.
0x29a53845005c00440061007400610062006100E.\.D.a.t.a.b.a.
0x29a54873006500 s.e.
0x29b0b0000000004d0061006a006f0072005600....M.a.j.o.r.V.
0x29b0c065007200730069006f006e0000000000e.r.s.i.o.n.....
0x29b0d0560065007200730069006f006e004d00V.e.r.s.i.o.n.M.
0x29b0e069006e006f007200000000004d006900i.n.o.r.....M.i.
0x29b0f06e006f00720056006500720073006900n.o.r.V.e.r.s.i.
0x29b1006f006e00000000004e006f004d006f00o.n.....N.o.M.o.
0x29b1106400690066007900000000004e006f00d.i.f.y.....N.o.
0x29b12052006500700061006900720000000000R.e.p.a.i.r.....
0x29b130687474703a2f2f7777772e75746f7272http://www.utorr
0x29b140656e742e636f6d00550052004c004900ent.com.U.R.L.I.
0x29b1506e0066006f00410062006f0075007400n.f.o.A.b.o.u.t.
0x29b1600000000042006900740054006f007200....B.i.t.T.o.r.
0x29b170720065006e007400200049006e006300r.e.n.t. .I.n.c.
0x29b1802e0000005000750062006c0069007300....P.u.b.l.i.s.
0x29b190680065007200000053006f0066007400h.e.r...S.o.f.t.
0x29b1a077006100720065005c0043006c006100w.a.r.e.\.C.l.a.
0x29b1b073007300650073005c002e0074006f00s.s.e.s.\...t.o.
0x29b1c07200720065006e0074005c004f007000r.r.e.n.t.\.O.p.
0x29b1d065006e00570069007400680050007200e.n.W.i.t.h.P.r.
0x29b1e06f006700690064007300000061007000o.g.i.d.s...a.p.
0x29b1f070006c00690063006100740069006f00p.l.i.c.a.t.i.o.
0x29b2006e002f0078002d006d00610067006e00n./.x.-.m.a.g.n.
0x29b21065007400000000006100700070006c00e.t.....a.p.p.l.
0x29b220690063006100740069006f006e002f00i.c.a.t.i.o.n./.
0x29b23078002d0062006900740074006f007200x.-.b.i.t.t.o.r.
0x29b240720065006e0074 r.e.n.t
⋯5 more rows
0x3727a800000000000000000000000000000000................
0x3727b873006d00730073002e00650078006500s.m.s.s...e.x.e.
0x3727c800000000000000000000000000000000................
0x3727d800000000000000000000000000000000................
0x3727e800000000000000000000000000000000................
0x3727f873007600630068006f00730074002e00s.v.c.h.o.s.t...
0x37280865007800650000000000000000000000e.x.e...........
⋯5 more rows
0x37286800000000000000000000000000000000................
0x3728786500780070006c006f00720065007200e.x.p.l.o.r.e.r.
0x3728882e006500780065000000000000000000..e.x.e.........
0x37289800000000000000000000000000000000................
0x3728a800000000000000000000000000000000................
0x3728b8770069006e0069006e00690074002e00w.i.n.i.n.i.t...
0x3728c865007800650000000000000000000000e.x.e...........
0x3728d800000000000000000000000000000000................
0x3728e800000000000000000000000000000000................
0x3728f86c0073006100730073002e0065007800l.s.a.s.s...e.x.
0x37290865000000000000000000000000000000e...............
⋯15 more rows