General
- Target 2026-06-27_3a796fa7b670d3653f5302ab40c6babe_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.0MB
- Sample260629-j9bf3aax7n
- SHA256 6410e772e5e8e80ef0262bc0e0aa569031d89fac87094e1c74a4f9d449d8248f
- MD5 3a796fa7b670d3653f5302ab40c6babe
- SHA1 552ff07922ee8909062aa4967c78b8839694b256
- SHA512 03c0aca5250101c88fccd2ed487afedd66f29820e69b8a06584a19fa8b7a73776a706c81d96dccd6a51185f7c416ecfd2341b61cb1b3f5c15300fbfa87728554
- SSDEEP 393216:c0ixLfYIhU8z7zhff4E3npAdHALcdHwnPp/QgEUcE4up62i++3w10hokMU:Ixj3mE7P3pSHAEQnPt9c1h21+gahrMU
- TLSH T11A27331177E68435D0621570D6BA936F59BBBD325622C4CBF3C5096E8A35AC28C3EF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-27_3a796fa7b670d3653f5302ab40c6babe_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_3a796fa7b670d3653f5302ab40c6babe_coinminer_darkgate_elex_glassworm_rhadamanthys_stop.exe
Resource
win11ltsc2024-20260618-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_3a796fa7b670d3653f5302ab40c6babe_coinminer_darkgate_elex_glassworm_rhadamanthys_stop
- Size 20.0MB
- SHA256 6410e772e5e8e80ef0262bc0e0aa569031d89fac87094e1c74a4f9d449d8248f
- MD5 3a796fa7b670d3653f5302ab40c6babe
- SHA1 552ff07922ee8909062aa4967c78b8839694b256
- SHA512 03c0aca5250101c88fccd2ed487afedd66f29820e69b8a06584a19fa8b7a73776a706c81d96dccd6a51185f7c416ecfd2341b61cb1b3f5c15300fbfa87728554
- SSDEEP 393216:c0ixLfYIhU8z7zhff4E3npAdHALcdHwnPp/QgEUcE4up62i++3w10hokMU:Ixj3mE7P3pSHAEQnPt9c1h21+gahrMU
- TLSH T11A27331177E68435D0621570D6BA936F59BBBD325622C4CBF3C5096E8A35AC28C3EF23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.