2026-04-15_6fdedd0451cbe3ef319ca583fb175210_coinminer_darkgate_elex_glassworm_rhadamanthys_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-04-15_6fdedd0451cbe3ef319ca583fb175210_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
Size 2.8MB
Sample260415-ran7waaz21
SHA256 c373758050dbd299fa0342f8218aad4b0dff41096fc7e480cec87d7b8fb66139
MD5 6fdedd0451cbe3ef319ca583fb175210
SHA1 2b5b3931a2651224560315773a267f757071ee27
SHA512 b9e3cdae8b2dc47ba13c18c1b266a122d5ae87e360456284a5c6b3c5d63cfabbab0c15702cc489d5fb54d9745530484229603a81e5d01b24162f0ba8d1e6c591
SSDEEP 49152:+TDPM84pwZqhaK6zbfqdlIoJdXN0BMOwLloBrugXcY/+:+Efwx2JdXN0B7+sO7
TLSH
T1F5D53B127AA18871D07686344561EB4D9272BD209B338E8F61917E9EFFF27C24D36732
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-04-15_6fdedd0451cbe3ef319ca583fb175210_coinminer_darkgate_elex_glassworm_rhadamanthys_stop

File Explorer

2026-04-15_6fdedd0451cbe3ef319ca583fb175210_coinminer_darkgate_elex_glassworm_rhadamanthys_stop

.exe 2.8MB

2026-04-15_6fdedd0451cbe3ef319ca583fb175210_coinminer_darkgate_elex_glassworm_rhadamanthys_stop

IMPHASH 6df6e99bae10817058127898c796b82d
SHA256 c373758050dbd299fa0342f8218aad4b0dff41096fc7e480cec87d7b8fb66139
MD5 6fdedd0451cbe3ef319ca583fb175210
SHA1 2b5b3931a2651224560315773a267f757071ee27
SHA512 b9e3cdae8b2dc47ba13c18c1b266a122d5ae87e360456284a5c6b3c5d63cfabbab0c15702cc489d5fb54d9745530484229603a81e5d01b24162f0ba8d1e6c591
SSDEEP 49152:+TDPM84pwZqhaK6zbfqdlIoJdXN0BMOwLloBrugXcY/+:+Efwx2JdXN0B7+sO7
TLSH
T1F5D53B127AA18871D07686344561EB4D9272BD209B338E8F61917E9EFFF27C24D36732
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetPrivateProfileIntA GetPrivateProfileIntW GetModuleFileNameW LoadLibraryA GetModuleFileNameA GetPrivateProfileStringW GetProcAddress IsBadWritePtr LeaveCriticalSection EnterCriticalSection GlobalAddAtomA GlobalDeleteAtom GetVersionExA IsDBCSLeadByte GetCurrentThreadId GetTickCount GetSystemTimeAsFileTime GlobalMemoryStatus InitializeCriticalSection SetFilePointer DeleteCriticalSection GetACP GetVersionExW InterlockedDecrement InterlockedIncrement CreateFileMappingA CreateFileMappingW QueryPerformanceCounter QueryPerformanceFrequency SetEvent GetProcessTimes GetCurrentProcess GetLocalTime FlushFileBuffers GetAtomNameA lstrcmpA GetCurrentDirectoryW GetCurrentDirectoryA CreateFileW CreateFileA CreateEventW CreateEventA GetFileSize MapViewOfFile GetLastError UnmapViewOfFile CloseHandle IsBadReadPtr IsBadCodePtr LocalReAlloc LocalAlloc GetStdHandle HeapAlloc lstrcpynA WriteFile ExitProcess GetProcessHeap GetCommandLineA MoveFileA MultiByteToWideChar DeleteFileA LocalFree GetTempFileNameA GetCurrentProcessId GetPrivateProfileStringA lstrlenA lstrlenW WideCharToMultiByte TerminateProcess RtlUnwind RaiseException

user32

RegisterWindowMessageA RegisterWindowMessageW SystemParametersInfoA SystemParametersInfoW ReleaseDC GetSysColor GetSystemMetrics IntersectRect OffsetRect MessageBoxW MessageBoxA GetDC

shlwapi

SHCreateStreamOnFileW PathIsRelativeW PathCombineW wvnsprintfW PathRemoveFileSpecA wvnsprintfA wnsprintfA StrCmpNW StrCatBuffW StrCatBuffA PathAppendW SHGetValueW SHGetInverseCMAP StrStrIW StrCmpIW SHCreateShellPalette wnsprintfW PathRemoveFileSpecW PathFindFileNameW SHStrDupW StrToIntW StrCpyNW

ole32

CoCreateInstance CoTaskMemFree CreateStreamOnHGlobal CoTaskMemAlloc CoInitialize CoUninitialize

oleaut32

SysFreeString SysAllocStringLen SysAllocStringByteLen VariantChangeType SysStringLen SysAllocString

advapi32

RegQueryValueExA CryptReleaseContext RegCloseKey RegQueryValueExW RegOpenKeyExW RegOpenKeyExA

gdi32

SetDIBColorTable SetTextColor SetStretchBltMode SetBkMode RealizePalette SelectPalette GetObjectW GetObjectA GetDeviceCaps CreateCompatibleDC SelectObject DeleteDC CreateCompatibleBitmap GetDIBits GetDIBColorTable GetPaletteEntries CreateDIBSection DeleteObject

Sharing

General

Malware Config

Signatures

File Explorer

2026-04-15_6fdedd0451cbe3ef319ca583fb175210_coinminer_darkgate_elex_glassworm_rhadamanthys_stop

kernel32

user32

shlwapi

ole32

oleaut32

advapi32

gdi32

generic