General
- Target 2026-05-10_20109ba68e95a96f47a04f9e744eeea3_coinminer_darkgate_elex_hijackloader_stop
- Size 1.3MB
- Sample260510-pvb2yaby2m
- SHA256 715ba317ff982d94c45262471ae433aaebe4c4c0b5a2ca039816ad9ab0ce0a40
- MD5 20109ba68e95a96f47a04f9e744eeea3
- SHA1 ed79e733e63c3adeafc6d9e977742067f6affa9c
- SHA512 ad2359052d4a9a293d697923e92f20dd09c8c2f03b7a4ad0d2e59c3753381aed258b1695f852747632ec4e65c4f350dbdc4caff7086a238dc423a71e6f6f44c0
- SSDEEP 24576:E1nsKjtne9d/Ph1R8/vHs4NbkCqb+Bgf+aq+2liFnkNw1Br9r:0YrROs4NbEb+Bw+vpIFnkG1L
- TLSH T1F855BE1177C6C032D3720A70D96D966AA4B6BD325F348A8F62851B6D1E74DC28C3EF1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-10_20109ba68e95a96f47a04f9e744eeea3_coinminer_darkgate_elex_hijackloader_stop.exe
Resource
win10v2004-20260130-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-10_20109ba68e95a96f47a04f9e744eeea3_coinminer_darkgate_elex_hijackloader_stop.exe
Resource
win11-20260130-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-10_20109ba68e95a96f47a04f9e744eeea3_coinminer_darkgate_elex_hijackloader_stop
- Size 1.3MB
- SHA256 715ba317ff982d94c45262471ae433aaebe4c4c0b5a2ca039816ad9ab0ce0a40
- MD5 20109ba68e95a96f47a04f9e744eeea3
- SHA1 ed79e733e63c3adeafc6d9e977742067f6affa9c
- SHA512 ad2359052d4a9a293d697923e92f20dd09c8c2f03b7a4ad0d2e59c3753381aed258b1695f852747632ec4e65c4f350dbdc4caff7086a238dc423a71e6f6f44c0
- SSDEEP 24576:E1nsKjtne9d/Ph1R8/vHs4NbkCqb+Bgf+aq+2liFnkNw1Br9r:0YrROs4NbEb+Bw+vpIFnkG1L
- TLSH T1F855BE1177C6C032D3720A70D96D966AA4B6BD325F348A8F62851B6D1E74DC28C3EF1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.