General
- Target 2026-04-15_b14be9d50c1b6066b161d1aa6f0a7f3e_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 18.0MB
- Sample260415-14fx2adv2v
- SHA256 1679e953a66dd57a690776982c5c689370ac64edc4e868710b221086cc49a227
- MD5 b14be9d50c1b6066b161d1aa6f0a7f3e
- SHA1 30ca256eda7ce0d1f3e306c3b791a9c8a4b5e929
- SHA512 d0e311c0d108ac6780215e4d4a6d81fbf54a5f5064adefaf88a595b0361ace8b98cf80900427c06e0531813d1b7985d0e6509acc18ac4df2b98b3788643d3581
- SSDEEP 393216:q0oTTTU8z7zhff4E3npAd8Lc4HwgieWlF9ctMO1kofWnJdC:kTEE7P3pS8hQgieWJcuOCofWJM
- TLSH T18917331177DA8431D0721671E56AD36A257BBD311B36C8DBF3E8059E5A32A828C3DF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-15_b14be9d50c1b6066b161d1aa6f0a7f3e_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260130-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_b14be9d50c1b6066b161d1aa6f0a7f3e_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11-20260130-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_b14be9d50c1b6066b161d1aa6f0a7f3e_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 18.0MB
- SHA256 1679e953a66dd57a690776982c5c689370ac64edc4e868710b221086cc49a227
- MD5 b14be9d50c1b6066b161d1aa6f0a7f3e
- SHA1 30ca256eda7ce0d1f3e306c3b791a9c8a4b5e929
- SHA512 d0e311c0d108ac6780215e4d4a6d81fbf54a5f5064adefaf88a595b0361ace8b98cf80900427c06e0531813d1b7985d0e6509acc18ac4df2b98b3788643d3581
- SSDEEP 393216:q0oTTTU8z7zhff4E3npAd8Lc4HwgieWlF9ctMO1kofWnJdC:kTEE7P3pS8hQgieWJcuOCofWJM
- TLSH T18917331177DA8431D0721671E56AD36A257BBD311B36C8DBF3E8059E5A32A828C3DF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.