General
- Target 2026-06-02_7ff23040b1d262fcf5f25c0b8441fe2d_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 11.4MB
- Sample260602-v3eqpacy3k
- SHA256 5362e992ce965794a49c33c6fe37e8a6150eeb4b8b056d82bce85415a8343169
- MD5 7ff23040b1d262fcf5f25c0b8441fe2d
- SHA1 ba6750f1d59bfde0a9a4b2f9fc4a8190e7e2c542
- SHA512 58e3821d1249bb29bc44018e39bda0ba6c087eb9b33e60cd1515c64317af6a2d51ab01b63cab2216edd278d83a82aa93382cebd87aa76df8625d96bb6ed92f90
- SSDEEP 196608:H0QYj7gJUmOQfYIhUWDeS706h5tf45eJYIPrgY171y26O+KLckEqHt:H0MxLfYIhU8z7zhff4E3npAdO+KLcQHt
- TLSH T1DBC6331177D9C435D1A20575D66AD36B29BAFD325B32C8CBA3D80A5D4A31AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-02_7ff23040b1d262fcf5f25c0b8441fe2d_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_7ff23040b1d262fcf5f25c0b8441fe2d_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_7ff23040b1d262fcf5f25c0b8441fe2d_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 11.4MB
- SHA256 5362e992ce965794a49c33c6fe37e8a6150eeb4b8b056d82bce85415a8343169
- MD5 7ff23040b1d262fcf5f25c0b8441fe2d
- SHA1 ba6750f1d59bfde0a9a4b2f9fc4a8190e7e2c542
- SHA512 58e3821d1249bb29bc44018e39bda0ba6c087eb9b33e60cd1515c64317af6a2d51ab01b63cab2216edd278d83a82aa93382cebd87aa76df8625d96bb6ed92f90
- SSDEEP 196608:H0QYj7gJUmOQfYIhUWDeS706h5tf45eJYIPrgY171y26O+KLckEqHt:H0MxLfYIhU8z7zhff4E3npAdO+KLcQHt
- TLSH T1DBC6331177D9C435D1A20575D66AD36B29BAFD325B32C8CBA3D80A5D4A31AC2CC39F23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Checks for any installed AV software in registry
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.