General
- Target 2026-06-27_5c5701d712ec1ed2cd540a14c80315e7_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.7MB
- Sample260629-hsvypsht5m
- SHA256 f7ac55a4d0eb3c2edb34c3f4d7333bea49b6a883a933bd76e398374d6f11832f
- MD5 5c5701d712ec1ed2cd540a14c80315e7
- SHA1 4164bc9e20b6274ecd38cd7bdf4ba5a60ea8145e
- SHA512 b2b2a30191681342aa28aaae7b61c53e7b75071cf00f8a0d0ce837e3acf136502d91b040c243b1f13defae3c3ca9bec14c4013d9789f3d092cdf3f554a139771
- SSDEEP 393216:H0MxLfYIhU8z7zhff4E3npAdO+KLcQHwnPp/QgE+JxcUGxMzAOP37:Txj3mE7P3pS7KZQnPtT4Da0Q37
- TLSH T13727331277E59431D1621971D6BAD36A987BFD321732C4CBA3D909AD4A31AC2C83DF32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-27_5c5701d712ec1ed2cd540a14c80315e7_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_5c5701d712ec1ed2cd540a14c80315e7_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260618-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_5c5701d712ec1ed2cd540a14c80315e7_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 19.7MB
- SHA256 f7ac55a4d0eb3c2edb34c3f4d7333bea49b6a883a933bd76e398374d6f11832f
- MD5 5c5701d712ec1ed2cd540a14c80315e7
- SHA1 4164bc9e20b6274ecd38cd7bdf4ba5a60ea8145e
- SHA512 b2b2a30191681342aa28aaae7b61c53e7b75071cf00f8a0d0ce837e3acf136502d91b040c243b1f13defae3c3ca9bec14c4013d9789f3d092cdf3f554a139771
- SSDEEP 393216:H0MxLfYIhU8z7zhff4E3npAdO+KLcQHwnPp/QgE+JxcUGxMzAOP37:Txj3mE7P3pS7KZQnPtT4Da0Q37
- TLSH T13727331277E59431D1621971D6BAD36A987BFD321732C4CBA3D909AD4A31AC2C83DF32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.