General
- Target 2026-05-08_9ca6979aa1fcade13459016817655819_amadey_coinminer_darkgate_elex_glassworm_magicrat_manuscrypt_rhadamanthys_stop_swisyn
- Size 25.6MB
- Sample260508-t36czaev2j
- SHA256 6e123f013731446593009d92a707ac706fd89a5819d817a973db7f5ad1fbbf39
- MD5 9ca6979aa1fcade13459016817655819
- SHA1 533bc18f6852660fc78a4798a8507cfbb22a98c0
- SHA512 1a862c3ada1975c6c76c6ae6562b173103cfe702c5f18af40e2af82f2bc3b61e7c9a3f96c91addfff164408ac9157baaeaf33616e5819ddad6182e847bd432ec
- SSDEEP 393216:ndicudqFewVG9OXlhYd1dCAitCiMgnIrEpGJsv6tWKFdu9CH:cdFqjYd1dSEihdC
- TLSH T165476B59EA4354F0EE2315B1868BF37F57206614C422DEF7EF4DEE99E8336222406726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-08_9ca6979aa1fcade13459016817655819_amadey_coinminer_darkgate_elex_glassworm_magicrat_manusc.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-08_9ca6979aa1fcade13459016817655819_amadey_coinminer_darkgate_elex_glassworm_magicrat_manusc.exe
Resource
win11-20250502-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-08_9ca6979aa1fcade13459016817655819_amadey_coinminer_darkgate_elex_glassworm_magicrat_manuscrypt_rhadamanthys_stop_swisyn
- Size 25.6MB
- SHA256 6e123f013731446593009d92a707ac706fd89a5819d817a973db7f5ad1fbbf39
- MD5 9ca6979aa1fcade13459016817655819
- SHA1 533bc18f6852660fc78a4798a8507cfbb22a98c0
- SHA512 1a862c3ada1975c6c76c6ae6562b173103cfe702c5f18af40e2af82f2bc3b61e7c9a3f96c91addfff164408ac9157baaeaf33616e5819ddad6182e847bd432ec
- SSDEEP 393216:ndicudqFewVG9OXlhYd1dCAitCiMgnIrEpGJsv6tWKFdu9CH:cdFqjYd1dSEihdC
- TLSH T165476B59EA4354F0EE2315B1868BF37F57206614C422DEF7EF4DEE99E8336222406726
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Modifies visibility of hidden/system files in Explorer
Executes dropped EXE
Adds Run key to start application
Drops file in System32 directory