General
- Target 2026-04-24_85a0a6d687ab4cef809c5b7c0049d72a_amadey_coinminer_darkgate_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 3.0MB
- Sample260424-vs87jsfy4j
- SHA256 9b7d779441d0ef21c8239c0a6c5e5ecce92251b5b7cd088cd0577aa9b888622a
- MD5 85a0a6d687ab4cef809c5b7c0049d72a
- SHA1 d9f2cb4ecb39145f0b8c84b124c907fcfa084eb3
- SHA512 24fba51ddd7a37c31597ff5364635164f836c9c3ad7f0020a1723d477784131cf519a2e842ec704a5b1b0add46a59f467160cff6c49ca096d37af836e75662a8
- SSDEEP 49152:9HHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMj:9nKdBWsM0r1Qn1K4XKH40Feu
- TLSH T134E58E11F7A0C036C4AB027589BA476EA678FD614B2547CBA3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-24_85a0a6d687ab4cef809c5b7c0049d72a_amadey_coinminer_darkgate_elex_glassworm_graphican_kwamp.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-24_85a0a6d687ab4cef809c5b7c0049d72a_amadey_coinminer_darkgate_elex_glassworm_graphican_kwamp.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-24_85a0a6d687ab4cef809c5b7c0049d72a_amadey_coinminer_darkgate_elex_glassworm_graphican_kwampirs_mafia_remcos_rhadamanthys_smoke-loader_stop
- Size 3.0MB
- SHA256 9b7d779441d0ef21c8239c0a6c5e5ecce92251b5b7cd088cd0577aa9b888622a
- MD5 85a0a6d687ab4cef809c5b7c0049d72a
- SHA1 d9f2cb4ecb39145f0b8c84b124c907fcfa084eb3
- SHA512 24fba51ddd7a37c31597ff5364635164f836c9c3ad7f0020a1723d477784131cf519a2e842ec704a5b1b0add46a59f467160cff6c49ca096d37af836e75662a8
- SSDEEP 49152:9HHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMj:9nKdBWsM0r1Qn1K4XKH40Feu
- TLSH T134E58E11F7A0C036C4AB027589BA476EA678FD614B2547CBA3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory