2026-05-07_acb85da19d20b2947349dec92d866574_amadey_coinminer_darkgate_fabookie_glassworm_hawkeye_smoke-loader

General

Target
2026-05-07_acb85da19d20b2947349dec92d866574_amadey_coinminer_darkgate_fabookie_glassworm_hawkeye_smoke-loader
Size 3.9MB
Sample260507-mxvwqact4w
SHA256 9f707e8c88e4406856a3f527d377173160dadcdf0c0498a3a31da2890623891f
MD5 acb85da19d20b2947349dec92d866574
SHA1 c91601e478e70e807f3a9263450c8d7fa030854a
SHA512 9fd1f5a33929e427b0f39bc0b16a13c3dfacc8583c18dbd9b42c2657cf949c4080f82feeeaf3cfa3b8706532fc2e375e56a7e256cdd166ccb7e3c03a2a5b2efd
SSDEEP 98304:nHxWvsgzhNDmCnh7DOJdXN0B7+ssIDQA55:nH4zzSCnh7DmuQU5
TLSH
T1D716D012B69092BFD9730131CA66A3356179BD300B22F747B39C7B4D19B19D26A3B723
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-07_acb85da19d20b2947349dec92d866574_amadey_coinminer_darkgate_fabookie_glassworm_hawkeye_smoke-loader

File Explorer

2026-05-07_acb85da19d20b2947349dec92d866574_amadey_coinminer_darkgate_fabookie_glassworm_hawkeye_smoke-loader

.exe 3.9MB

2026-05-07_acb85da19d20b2947349dec92d866574_amadey_coinminer_darkgate_fabookie_glassworm_hawkeye_smoke-loader

IMPHASH 94e5055bc710cabceaad4333a15eee0b
SHA256 9f707e8c88e4406856a3f527d377173160dadcdf0c0498a3a31da2890623891f
MD5 acb85da19d20b2947349dec92d866574
SHA1 c91601e478e70e807f3a9263450c8d7fa030854a
SHA512 9fd1f5a33929e427b0f39bc0b16a13c3dfacc8583c18dbd9b42c2657cf949c4080f82feeeaf3cfa3b8706532fc2e375e56a7e256cdd166ccb7e3c03a2a5b2efd
SSDEEP 98304:nHxWvsgzhNDmCnh7DOJdXN0B7+ssIDQA55:nH4zzSCnh7DmuQU5
TLSH
T1D716D012B69092BFD9730131CA66A3356179BD300B22F747B39C7B4D19B19D26A3B723
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

40720

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\re\jdk7u45\229\build\windows-amd64\tmp\java\javaw\obj64\javaw.pdb

advapi32

RegQueryValueExA RegCloseKey RegOpenKeyExA RegEnumKeyA

user32

MessageBoxA

comctl32

InitCommonControlsEx

kernel32

CreateFileW GetCommandLineA GetModuleFileNameA QueryPerformanceCounter QueryPerformanceFrequency LocalFree FormatMessageA GetLastError CloseHandle GetExitCodeProcess WaitForSingleObject CreateProcessA GetProcAddress GetModuleHandleA LoadLibraryA GetExitCodeThread FindFirstFileA FindNextFileA FindClose GetModuleHandleW ExitProcess DecodePointer GetStartupInfoW EnterCriticalSection LeaveCriticalSection HeapAlloc HeapReAlloc HeapFree FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA MultiByteToWideChar GetFileAttributesA ExitThread GetCurrentThreadId CreateThread InitializeCriticalSectionAndSpinCount DeleteCriticalSection EncodePointer LoadLibraryW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext TerminateProcess GetCurrentProcess FlsGetValue FlsSetValue FlsFree SetLastError FlsAlloc RtlUnwindEx WriteFile GetStdHandle GetModuleFileNameW WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType HeapSetInformation GetVersion HeapCreate GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle GetConsoleCP GetConsoleMode GetFullPathNameA GetFileInformationByHandle PeekNamedPipe CreateFileA GetCurrentDirectoryW FlushFileBuffers SetEnvironmentVariableW SetEnvironmentVariableA GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize CompareStringW SetFilePointer ReadFile WriteConsoleW GetDriveTypeW SetEndOfFile GetProcessHeap GetTimeZoneInformation LCMapStringW GetStringTypeW

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-07_acb85da19d20b2947349dec92d866574_amadey_coinminer_darkgate_fabookie_glassworm_hawkeye_smoke-loader

advapi32

user32

comctl32

kernel32

generic