General
- Target 2026-05-23_809681a1279e5083961b873a14ab2409_amadey_coinminer_darkgate_elex_glassworm_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 3.8MB
- Sample260523-vdbyhaes4m
- SHA256 534bcbae2398834d248705605f8dbda54606c88376b8da28ce10e77d86e6e4b2
- MD5 809681a1279e5083961b873a14ab2409
- SHA1 729a952bcdd4fcd0716d099a029367f2fa56bd85
- SHA512 e621ae505536059a57f719a3d6b007986ed595ece47082c34c0b6ded9489da7a402e5c1e64167dc9e6fa8ef32363f7b14125c1670f583897c199e17b6d0f9d8f
- SSDEEP 98304:IstsFe9XM+M6RkMkIM7NjxAZw2fP5GAAauknz8:vmFetfsAz8
- TLSH T109069F12F690C171D06240718D56D72DAA35BC158B228ECB73987F9D7FF26D1AA3A332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-05-23_809681a1279e5083961b873a14ab2409_amadey_coinminer_darkgate_elex_glassworm_manuscrypt_redl.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-23_809681a1279e5083961b873a14ab2409_amadey_coinminer_darkgate_elex_glassworm_manuscrypt_redl.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-23_809681a1279e5083961b873a14ab2409_amadey_coinminer_darkgate_elex_glassworm_manuscrypt_redline-stealer_rhadamanthys_smoke-loader_stealc_stop
- Size 3.8MB
- SHA256 534bcbae2398834d248705605f8dbda54606c88376b8da28ce10e77d86e6e4b2
- MD5 809681a1279e5083961b873a14ab2409
- SHA1 729a952bcdd4fcd0716d099a029367f2fa56bd85
- SHA512 e621ae505536059a57f719a3d6b007986ed595ece47082c34c0b6ded9489da7a402e5c1e64167dc9e6fa8ef32363f7b14125c1670f583897c199e17b6d0f9d8f
- SSDEEP 98304:IstsFe9XM+M6RkMkIM7NjxAZw2fP5GAAauknz8:vmFetfsAz8
- TLSH T109069F12F690C171D06240718D56D72DAA35BC158B228ECB73987F9D7FF26D1AA3A332
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.