General
- Target 2026-05-22_bf6f119a5f62f0d2f1059b3a897238e4_amadey_coinminer_darkgate_elex_glassworm_hawkeye_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 4.9MB
- Sample260522-vjydpadt7s
- SHA256 0d66caf72edf8d391fc49fd8d8a4162839320472e07f62ed80e8766f9a6027df
- MD5 bf6f119a5f62f0d2f1059b3a897238e4
- SHA1 892567f1e14c079055e7f22e1d015d83c31e1bf8
- SHA512 cc31177adccc843d636120b9111de2f6872aad42eb89f8ecc7e1d2b91fc8992e20a11ebe31983bb8cee0477922bb26ae32ffa91b2dbe92842a88ea3da45829aa
- SSDEEP 98304:IstsF1WCLJdXN0B7+sUM+M6RkMkIM7BsNi9XwgwfouoJ9kjo:vmF5i9XwgwAuoJoo
- TLSH T18036AF12F7A08032E17381718966E725F575BC311F3196CBA394AB1D6E726C29A37B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-22_bf6f119a5f62f0d2f1059b3a897238e4_amadey_coinminer_darkgate_elex_glassworm_hawkeye_redline.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-22_bf6f119a5f62f0d2f1059b3a897238e4_amadey_coinminer_darkgate_elex_glassworm_hawkeye_redline.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-22_bf6f119a5f62f0d2f1059b3a897238e4_amadey_coinminer_darkgate_elex_glassworm_hawkeye_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop
- Size 4.9MB
- SHA256 0d66caf72edf8d391fc49fd8d8a4162839320472e07f62ed80e8766f9a6027df
- MD5 bf6f119a5f62f0d2f1059b3a897238e4
- SHA1 892567f1e14c079055e7f22e1d015d83c31e1bf8
- SHA512 cc31177adccc843d636120b9111de2f6872aad42eb89f8ecc7e1d2b91fc8992e20a11ebe31983bb8cee0477922bb26ae32ffa91b2dbe92842a88ea3da45829aa
- SSDEEP 98304:IstsF1WCLJdXN0B7+sUM+M6RkMkIM7BsNi9XwgwfouoJ9kjo:vmF5i9XwgwAuoJoo
- TLSH T18036AF12F7A08032E17381718966E725F575BC311F3196CBA394AB1D6E726C29A37B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.