General

  • Target
    2026-06-28_7b0ec5c2fbee256b3afda110cd5044e5_amadey_coinminer_darkgate_darpapox_elex_nymaim_remcos_rhadamanthys_smoke-loader_wannacry
  • Size 2.3MB
  • Sample260628-1a8e7afs5k
  • SHA256 2cb000cd31a7c18d3366e99636b941d8465c9872d6cbca1a6f47a76a8686c16d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-06-28_7b0ec5c2fbee256b3afda110cd5044e5_amadey_coinminer_darkgate_darpapox_elex_nymaim_remcos_rhadamanthys_smoke-loader_wannacry
    • Size 2.3MB
    • SHA256 2cb000cd31a7c18d3366e99636b941d8465c9872d6cbca1a6f47a76a8686c16d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks