General
- Target 2026-06-26_c98b3f65c91e353ea86422a122dfcfba_amadey_coinminer_darkgate_elex_emotet_glassworm_remcos_smoke-loader
- Size 9.7MB
- Sample260629-ph47ysc17y
- SHA256 f218d66a8b3e72fcd53f650c1253fee6f9d39ab875dc29d3ba2a964b63cb8e3c
- MD5 c98b3f65c91e353ea86422a122dfcfba
- SHA1 1c80e650a3135d30ac2f7dd7b0662e837a2887d0
- SHA512 bf9c40429d548daf0e8f9b39c46a8ec57ed762696b2cb6a659bfc0670019c7275c658f8c1b7dde357f94f430e0c9326e7cbedd23f107a082f59853c7b100cb4b
- SSDEEP 98304:ghvHDlG4ovLKn+hUI2SUB0fmPpg0xZLZ4QowKGs8UyyuuoOchzNRSCcz9h3R:+gpp24oKwxZUBpzAzN0CczT
- TLSH T14FA69D137511D060D8440A3BE5A24238257A5744ABB9D8C3FB5CEE67BF342E36A3F71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-06-26_c98b3f65c91e353ea86422a122dfcfba_amadey_coinminer_darkgate_elex_emotet_glassworm_remcos_smoke-loader.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-26_c98b3f65c91e353ea86422a122dfcfba_amadey_coinminer_darkgate_elex_emotet_glassworm_remcos_smoke-loader.exe
Resource
win11ltsc2024-20260629-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-26_c98b3f65c91e353ea86422a122dfcfba_amadey_coinminer_darkgate_elex_emotet_glassworm_remcos_smoke-loader
- Size 9.7MB
- SHA256 f218d66a8b3e72fcd53f650c1253fee6f9d39ab875dc29d3ba2a964b63cb8e3c
- MD5 c98b3f65c91e353ea86422a122dfcfba
- SHA1 1c80e650a3135d30ac2f7dd7b0662e837a2887d0
- SHA512 bf9c40429d548daf0e8f9b39c46a8ec57ed762696b2cb6a659bfc0670019c7275c658f8c1b7dde357f94f430e0c9326e7cbedd23f107a082f59853c7b100cb4b
- SSDEEP 98304:ghvHDlG4ovLKn+hUI2SUB0fmPpg0xZLZ4QowKGs8UyyuuoOchzNRSCcz9h3R:+gpp24oKwxZUBpzAzN0CczT
- TLSH T14FA69D137511D060D8440A3BE5A24238257A5744ABB9D8C3FB5CEE67BF342E36A3F71A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.