General
- Target 2026-06-28_83e2f5f5e13813928c40ea9de6f9aa4d_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.4MB
- Sample260628-zz7phset3w
- SHA256 1de6ada271bc6aef73bf6802bf174f32411e0f94236f84d036868606a9da5218
- MD5 83e2f5f5e13813928c40ea9de6f9aa4d
- SHA1 d55c094505cbcd61d68c9d6ef08a0a8c4e1b0943
- SHA512 c6405b857fa458480c633f616b317ac507231315e02119b762b347c5a9df2d5cb763584b862a7a026f84e9ce935775ff9258fc987799da25ad733bbad63b7a4d
- SSDEEP 393216:H0MxLfYIhU8z7zhff4E3npAdO+KLcQHwnPp/QgE+JxcUGxMzAOP3a4Hc8h:Txj3mE7P3pS7KZQnPtT4Da0Q3a4Hc8h
- TLSH T1C027331277D59431D1621971D6BAD36A98BAFD321732C4CBE3D909AD4A31AC2CC3DF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-28_83e2f5f5e13813928c40ea9de6f9aa4d_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_83e2f5f5e13813928c40ea9de6f9aa4d_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260618-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_83e2f5f5e13813928c40ea9de6f9aa4d_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.4MB
- SHA256 1de6ada271bc6aef73bf6802bf174f32411e0f94236f84d036868606a9da5218
- MD5 83e2f5f5e13813928c40ea9de6f9aa4d
- SHA1 d55c094505cbcd61d68c9d6ef08a0a8c4e1b0943
- SHA512 c6405b857fa458480c633f616b317ac507231315e02119b762b347c5a9df2d5cb763584b862a7a026f84e9ce935775ff9258fc987799da25ad733bbad63b7a4d
- SSDEEP 393216:H0MxLfYIhU8z7zhff4E3npAdO+KLcQHwnPp/QgE+JxcUGxMzAOP3a4Hc8h:Txj3mE7P3pS7KZQnPtT4Da0Q3a4Hc8h
- TLSH T1C027331277D59431D1621971D6BAD36A98BAFD321732C4CBE3D909AD4A31AC2CC3DF22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.